General

As part of our ongoing commitment to transparency and security, Box is helping our customers navigate the recent updates introduced by the Federal Risk and Authorization Management Program (FedRAMP). As part of the FedRAMP 2026 Consolidated Rules, FedRAMP has introduced significant updates, including new terminology, that affect how federal agencies and cloud providers describe and pursue FedRAMP status. If you use Box to secure and manage your regulated content, this article explains what is changing, why these updates are being made, and what they mean for your organization.Why is the Terminology Changing?The FedRAMP Program Management Office (PMO) updated its language to clarify the distinct roles of Cloud Service Providers (CSPs) and federal agencies under federal security guidelines: Avoiding Confusion with Agency ATOs: The law defines a FedRAMP authorization as "a certification that a cloud computing product or service has completed a FedRAMP authorization process." Transitioning

Hi Box Devs 👋 ​Your agent is only as powerful as the information it can reach. Browserbase opens up the web, and Box transforms what it finds into secure, actionable enterprise knowledge. ​Join us on Wednesday, August 26, 9AM PT for a hands-on technical session packed with live demos of Browserbase and Box powering real-world agent workflows.Sign up here: Browserbase + Box: Unlock your agent’s full capabilities ​In this live webinar, you’ll learn how to: ​Give agents secure access to authenticated websites and browser workflows ​Store, search, and reason over the collected content with Box ​Keep agents and humans working from the same shared context ​Featuring:​Chris Kim — Senior Developer Relations Engineer, BoxKyle Jeong — Growth Engineer, Browserbase​📅 Wednesday, August 26⏰ 9:00–10:00 AM PDT📍 Live on Zoom​Hope to see you there, and bring your questions!

Thank you to everyone who joined our Community Roundtable hosted by ​@Ben Weiner from Box , Katia Krasko, and Stuti Tandon, this session brought together for Box community to explore how organizations can transition from uncontrolled “token maxxing” to strategic, high-ROI AI optimization using the new Box AI Insights Dashboard in the Box Admin Console.   1. Summary & Core PillarsAs organizations rapidly deploy generative AI and custom agents across daily workflows, enterprise admins face a common governance challenge: understanding how AI is being utilized, by whom, at what scale, and at what cost.Without centralized visibility, organizations risk:“Token Maxxing” / Waste: Runaway consumption and inefficient prompt designs without clear business alignment. Budget Surprises: Inability to forecast monthly AI Unit allotments accurately. Siloed Innovation: Missing out on powerful custom agents and automations developed by individual teams.To bridge this governance gap, Box introduced th

Hey all - the Box Customer Success team is fortunate to spend time talking with customers across all industries and company sizes, so we again want to share some of the most common themes we're hearing, along with guidance and resources to help you get the most out of Box: What we're hearing: Security and compliance are top of mind, especially for customers in financial services, legal, healthcare, and government contracting. Box Shield, Shield Pro, and Governance are the most common areas of focus for our customers (after Box AI!) For End Users: Understanding how your organization classifies and protects content helps you work more securely. If you see a classification label on a file, it means your admin has applied a security policy to it. For Box Admins: Shield and Governance give you powerful tools to classify content, detect threats, enforce access policies, and meet compliance requirements (like FINRA, eDiscovery, retention, legal holds). You can learn more about these at the re

That question came up during our recent community roundtable - and it gets to the heart of responsible AI adoption. AI agents can do more than retrieve information. Depending on how they are configured, they may read, summarize, create, move, share, or delete content and trigger actions in other systems. That combination of data access and autonomy creates a new governance challenge: organizations must control not only who can access content, but also what an agent is allowed to do with it. A practical starting point is to establish five principles. 1. Start with data governance, not the AI toolBefore enabling an agent, understand the data it may access  what's sensitive, regulated, or subject to legal hold, and who owns it. Then ask:Are permissions current and appropriately scoped? Is content classified consistently? Are there outdated, duplicated, or overshared files an agent could surface?An AI agent can amplify existing permission and classification problems. If employees already h

We are excited to announce a new enhancement to our Box for Microsoft 365 integration, designed to boost mobile productivity by introducing real-time co-authoring support on mobile devices.Key CapabilitiesSeamless Real-Time Collaboration: Users can now co-author documents in real time with colleagues directly from their mobile devices using the Microsoft Word, Excel, or PowerPoint apps. Automatic Saving: All edits and updates are automatically saved back to Box in real time, ensuring version control and data integrity. Flexible Access Points: Users can initiate co-authoring sessions seamlessly by opening files either directly from the Box mobile app or from within the respective Microsoft mobile apps.For Admins: Please ensure that the Box for Microsoft Co-Authoring integration is enabled for your users so they can take advantage of this new enhancement. For more details, please refer to this support article.For Users: To learn more about how to use this integration on your mobile devic

System metadata, like signature requests status, recipient name, date and time stamps, and more, are automatically collected and saved to the final signature request filesWe are excited to introduce the first phase of an integration between Box Sign and Box Metadata, connecting your e-signature requests seamlessly with your content ecosystem. By automatically capturing key signature request details as structured, actionable metadata on every signature request, we made agreements easier to find, organize, and build workflows around. This integration enables your organization to track agreements in real time, automate downstream business processes, and maximize your investment in AI.The initial phase of this integration begins with the ability to automatically create a standardized, read-only Box Sign Global Metadata Template for every signature request. As recipients take action, key transaction details are captured as system metadata and updated in real time, including information such

Thanks to ​@Aikokrishna Box ​@bmalhotra  for todays overview and demo of Box Agent Security and Governance, also thanks to our guests who joined and shared in the Q&A.  You can find the recording here and summary below.   ResourcesSlide deck: https://cloud.box.com/s/bubpp82m5ouhzmsaqlt0wwoesgs78p35Box AI Principles: https://www.box.com/legal/boxaiprinciples Main Topics1. The Rise of AI and Associated Risks: ​@bmalhotra highlighted the rapid adoption of AI agents and the significant security risks they introduce. He notes that traditional network security controls are insufficient as AI agents operate within the enterprise environment. He cites a Gartner statistic that 47% of organizations have already experienced a security incident involving an AI agent, often due to a lack of built-in guardrails and audit trails. Key risks discussed include prompt injection, where malicious instructions hidden in documents can cause an agent to perform unauthorized actions.2. Box's Content-Layer

We have some exciting news for everyone who needs to keep projects moving while away from their desk! We are thrilled to announce that Task Creation is now officially available on the Box Mobile app for both iOS and Android! 🚀We know that great ideas and important action items don't only happen when you are sitting at your computer. With this latest update, we are making task management and delegation completely seamless, no matter where you are.Here is a look at what you can do with Task Creation on Mobile:✅ Assign Tasks to Files — Need a colleague to review a contract or approve a presentation while you are on the go? You can now assign tasks directly to specific files right from your mobile device. Just select the file, assign the task, and keep the workflow moving.👍 Request Approvals Anywhere — Need a quick sign-off? You can easily create an Approval Task from your phone, allowing your teammates to quickly Approve or Reject the request from their end. No more project bottlenecks

Two weeks ago, Box, alongside NVIDIA, Microsoft, IBM, and others, formally signed on to support open weights AI. Open Weights Letter For anyone deep in enterprise IT and content workflows, this is a fundamental recalibration of how we think about building intelligent systems. For a long time, the narrative around AI has felt like a zero-sum game: you either go all-in on proprietary frontier models, or you build everything yourself. But the reality on the ground in finance, life sciences, legal, and healthcare looks completely different. Our community members aren't choosing one camp over the other - they're actively blending them.Here is how this actually plays out in enterprise architecture:Frontier models handle the heavy lifting - advanced reasoning, complex multi-step analysis, and cross-domain synthesis where maximum capability is non-negotiable. Open-weights models step in for specialized, high-volume workloads - letting teams adapt, fine-tune, and post-train models specifically

Thanks ​@jrobbins ​@Scott Picanco Box for yesterday’s overview and demo of metadata extract and confidence scores.  Please see below for the recording, summary and deck.  Topics covered included metadata overview, Box extract updates and roadmap. Live demo of metadata extraction, AI guardrails and confidence scoring, and workflow for invoice processing. Plus live polling and Q&A.  Slide deck here     1. The Value of Structured Data in an Unstructured World​@Scott Picanco Box began by highlighting that while content is the lifeblood of modern organizations, 90% of this data is unstructured, making its value difficult to tap into. He explains that metadata (structured data about data) is the missing link that makes AI truly useful. Applying metadata effectively leads to better decision-making, powers smarter agentic workflows with tools like Box Automate, and dramatically accelerates content search and discovery.  2. Challenges with Traditional Data Extraction​@Scott Picanco Box  out

 We have some exciting news to share! Hubs on Mobile is officially rolling out to General Availability! 🚀📱  We began a phased rollout on Thursday, August 6th, and we expect full availability for all users across both iOS and Android by this Thursday, August 13th.With this release, we are bringing the power of Box Hubs—our most requested capability—directly to your smartphone and tablet. You can now view your curated content portals, including project Hubs, and asset libraries on the go without missing a beat.Here is a look at what you can do with Hubs on Mobile:📍 Hubs in the Navigation Bar — We've added a dedicated Hubs tab right in the bottom navigation bar, making it incredibly fast and easy to find them the moment you open the app.🖼️ Hub Gallery View  — Browse through your Hubs in an intuitive, mobile-optimized gallery layout. You can easily toggle between list and tile views to find what works best for you.🤝 Consistent Experience — Access the exact same curated layouts, featur

Admins and co-admins can leverage the power of AI to automatically generate metadata templates, complete with fields, extraction instructions, and more, directly within Box ExtractWe recently introduced the ability to manually create or leverage the power of AI to automatically generate metadata templates directly within Box Extract. This new capability allows admins and co-admins to create metadata templates directly within Custom Extract Agent builder, without leaving Box Extract. Instead of switching over to the admin console manually create templates, configure individual fields within those templates, activate those templates, and then returning to Box Extract to continue setup, teams can now stay in one streamlined experience from start to finish.While configuring a Custom Extract Agent, admins and co-admins can select up to 10 reference files from Box. Box AI then analyzes those files and automatically creates a metadata template based on the content within those 10 files. Admin

We recently released expanded support for additional file types for when using Custom Extract Agents in Box Extract, enabling enterprises to extract structured data from a broader range of file types and more of your organization's content.This is a follow-up to additional file type support in Box Extract that we launched in February 2026, which introduced support for a defined set of file types. This release expands file type support by including all file types available via the Box Extract API introducing parity with what we already provide programmatically.Box Extract now supports extraction from the following files when using Custom Extract Agents:Images: bmp, cr2, crw, dcm, dicm, dicom, dng, gif, heic, jpeg, jpg, nef, png, raf, raw, svg, tga, tif, tiff, webp Design/CAD: ai, dwg, eps, ps, psd, xbd, xdw Documents: boxcanvas, boxnote, doc, docx, gdoc, msg, odt, pages, pdf, rtf, webdoc, wpd Presentations: gslide, gslides, key, odp, ppt, pptx Spreadsheets: csv, gsheet, numbers, ods, ts

Metadata taxonomies provide a hierarchical relationship between fields for better metadata management and much more efficient user experience.We recently released the ability to support metadata taxonomies when extracting structured data from unstructured content and saving that data as metadata alongside content in Box with Box Extract. This capability allows teams to fully automate and operationalize their most complex, hierarchical metadata structures.Taxonomies allow Box administrators to model reusable, hierarchical schemas (such as Country → State/Province → City) to represent multi-level choices within metadata templates. This release ensures that these sophisticated structures can now be seamlessly processed and populated with extracted data using Box Extract. Teams can now enable and extract taxonomy-backed fields already attached to your metadata templates, turning previously static, disabled fields into active, automated data streams. Instead of configuring extraction instru

Thanks ​@Piotr Kowal Box for today’s great overview of Box zones, also thanks to our guests who joined and shared in the Q&A. Please find the recording and highlights below.  Resources. Full recording linkBox Zones Whitepaper link Main TopicsThe Need for Box Zones: ​@Piotr Kowal Box starts by explaining the critical importance of data residency in today's regulatory landscape, with a special focus on Europe and GDPR. He emphasizes that while GDPR doesn't mandate data location, storing data within a specific region like the EU simplifies compliance and mitigates the risk of significant financial penalties. This sets the stage for why a solution like Box Zones is essential for global organizations.Box Zones Expansion and Overview: The roundtable highlights the largest expansion in Box Zones history, bringing the total number of available zones to ten. This includes three brand-new zones in Switzerland, Singapore, and Israel, and significant compute upgrades for the existing Canada an

The Mobile team is thrilled to share that we've had a highly productive Q2! We've delivered major features that are now Generally Available, bringing a modernized AI experience, faster access to your notes, and enhanced capture capabilities directly on your smartphone and tablet.Our goal is to make working on the go as powerful and frictionless as possible. Here is a look at what we've rolled out this quarter to elevate your mobile productivity: ✨ Cross-platform AI Home (AX) — We've replaced the legacy Q&A with a unified, fully capable AI entry point. This gives you a dedicated, centralized space to interact with Box AI on the go. Whether you need to quickly summarize a lengthy report while commuting or extract key insights before a meeting, you can now do it seamlessly without having to open individual files. 🔍 AX + Search Integration — We've embedded Box AI directly into the mobile search experience. Finding information is no longer just about matching file names; you can now

Thanks ​@msyu Box and ​@Jakub Piech PM Mobile for yesterday’s overview of Box Mobile and recent updates. You can find the recordings and highlights below.Recap of Recent Releases​@Jakub Piech PM Mobile  presented a summary of features released in the past quarter, highlighting significant progress on the mobile roadmap. Key updates included:Box AI Home & AI Search on Mobile: The powerful capabilities of Box AI, previously available on the web, have been fully integrated into the mobile experience. Users can now get intelligent insights and perform complex, natural language searches across all their content directly from their mobile devices.EXIF Metadata & Capture: To support field-based workflows in industries like construction and transportation, the app now captures and displays EXIF metadata (like geolocation and timestamps) for images uploaded via mobile. EXIF data (Exchangeable Image File Format) is hidden technical information saved inside a digital photo, including came

We've been busy making Box Notes a better place to review, refine, and work together. This quarter brings a more unified commenting experience across Notes and Preview, alongside a set of interface updates and shortcuts designed to make everyday editing faster and cleaner.  On the collaboration side, comments and annotations now live together in a single comment pane. Box Notes will no longer distinguish between comments on the overall note and annotations on specific content — both appear together for a more consistent review flow. In Preview, both types are also surfaced under the Activity pane. You can reply to any comment within a threaded conversation and use @mentions to loop in the right collaborators. When a discussion wraps up, mark the thread as resolved — it'll move into a Resolved filter and can be reopened later if needed. Original authors can delete their own comments, but note that deleting a root comment deletes the entire thread. And if you rely heavily on comments, dr

Box Notes now offers a seamless AI experience by unifying conversation history between the inline AI composer and the sidebar. Whether you start a conversation inline while writing or switch to the sidebar for a broader view, your AI session stays connected as one continuous thread. The inline view keeps things light by showing only inline turns, while the sidebar view displays the complete session history across both entry points, clearly labeling which turns happened inline.This update benefits anyone who drafts documents with AI assistance and wants context to follow them wherever they work. Writers refining a section paragraph by paragraph, teams generating structured content, and Enterprise Plus and Enterprise Advanced customers leveraging the Box Agent will all find it easier to maintain momentum without losing track of previous prompts.  A couple of things to keep in mind: only one active AI turn can be in progress per note at a time. If one view is waiting on a response, you wo

Admins can configure which users and groups are forced to leverage a specific recipient authentication method for all signature requests sent from those predetermined users.We introduced the ability for admins and co-admins to enforce recipient authentication on all signature requests sent on behalf of the enterprise, giving them centralized control over how signers verify their identity before accessing and signing critical documents in highly regulated industries, public sector organizations, and security-conscious enterprises.Government signers are often mandated to use CAC/PIV (Common Access Card / Personal Identity Verification) cards or multi-factor authentication (MFA) to sign documents. With this capability, we are giving organizations in heavily regulated industries the ability to comply with strict compliance requirementsPreviously, enforcing recipient authentication for each signature request was a manual process that relied on individual senders or template creators selecti