Productivity and collaboration Security Governance

User storage Unlimited Full encryption in transit and at rest Box Governance: $ $ Business
Document retention and disposition
File upload / download size (max.) 5 Gb Granular access and collaboration controls
Unlimited version history
Version history (up to # per file) 50 50 100 Unltd User-enabled 2-factor authentication Defensible eDiscovery and legal holds
File sharing Shared link password security Security classification and domain whitelisting
and link expiration controls Content security policies (upload, download, sharing) Business Plus
File preview
Advanced trash controls
Usage logs
Box Mobile app Automatic email archive of user activities to Box
File statistics
Box Edit
File locking
Bulk managed user provisioning Compliance
Box Verified Enterprise
Enterprise
Box Sync SOC 1, SOC 2, SOC 3
Box Accelerator
Search ISO 27001, ISO 27018
Box Network Connect (with AT&T and NTT)
Favorites APEC CBPR, EU–US & Swiss–US Privacy Shield
Content manager
Recents TUV Rheinland Cloud Security Certification Enterprise with
Box Notes
Admin activity tracking Governance
FIPS 140-2
Admin role delegation
User management Binding Corporate Rules (BCRs)
Test environments (up to 5)
Shared links BSI C5
Security tab
Custom URLs FERPA Available
Password policy enforcement on request
Box Embed Trusted Cloud Data Protection (TCDP)
Device trust
Comments PCI DSS Level 1
Document watermarking
Tasks and approvals G-Cloud Framework
Box Zones** In-region data storage $ $ $
Box Capture app NIST 800-171 Feature
Options include:
Thumbnail preview US (Box Service Providers) included
IRS 1075
User statistics UK/Germany (IBM London–IBM Frankfurt)
UK (AWS London–Azure Cardiff) HIPAA/HITECH
Custom branding Germany/Ireland (AWS Frankfurt–Dublin) FedRAMP, FISMA, DoD Impact Level 4
Custom terms of service Japan/Singapore (AWS Tokyo–Singapore)
Japan (AWS Tokyo–Azure Osaka) SEC 17a-4 (FINRA) (Requires Box Governance) $ $ $ Feature
Custom metadata and metadata templates Canada/Ireland (AWS Montreal–Dublin) Export Control (ITAR/EAR) (Requires Box KeySafe) $ $ $
available
Custom search filters Canada (AWS Montreal–IBM Toronto) as add-on
Australia (AWS Sydney–Azure Melbourne) Box GxP Validation:*** $
External users in folders $ Annual audit of Box quality management system (QMS)
Box KeySafe $ $ $
Automations Initial validation accelerator pack (VAP)
Independent key control, Change logs and release notes
Box DICOM viewer (100 studies per month per user) $ $ Unchangeable audit log Automated testing tool (ATT) daily reports * For use
Content kill switch with custom
Options include:
Platform AWS KMS, AWS CloudHSM, AWS KMS GovCloud
Customer Success services development

Included API calls * Box Education standard end user training

Partner integrations
50K 50K 100K 100K
(Up to # per month per customer) Standard support (web, chat, request call)
** Compliance
Box Platform: Productivity integrations Box Education admin and custom training $ $ $ $
certifications
Platform enterprise $ $ $ $ Box for Office / Office 365 Premier services $ $ $ $ might have
Box for Google / G Suite 24/7 coverage, response SLAs
Platform monthly active user (MAU) limited
SaaS integrations 1 3 (Urgent: 1 hr | high and normal: 2 hrs) applicability
Monthly platform API calls
Collaboration (e.g. Slack, Workplace by Facebook) 99.9% uptime SLA, Premier specialist team
Platform storage (See: box.com/
CRM (e.g. Salesforce) Premier phone line and priority escalations
Monthly platform bandwidth Compliance)
eSignature (e.g. Adobe Sign, DocuSign) Shared helpdesk and helpdesk training
Platform view $ $ $ $ KeySafe key rotation assistance
Other SaaS partner integrations
Monthly platform view API calls
Identity / single sign-on integrations 1 Platinum Services $ $ $ $
Platform storage Premier services + named premier specialist
Monthly platform bandwidth Security integrations *** GxP Validation
On-site health checks and training
Additional information: $ $ $ $ Box for enterprise mobility does not cover
Account monitoring and updates
Platform storage, bandwidth, API calls management (EMM) integrations
On-demand Reporting
all add-on
or additional resources available à la carte eDiscovery integrations features and/or
Box Consulting $ $ $ $
functionality
DLP integrations (Non-Classification) Implementation | optimization | platform services
DLP integrations (Classification) (requires Governance) $ Box Shuttle and Migrations Services $ $ $ $