VendorScore · File storage · Data-access posture
A plain-language answer from Box's public Security, KeySafe, Trust, Subprocessors and Product Terms pages. Holding the keys is not the same as Box being unable to read your files.
Get the full 5-dimension PDF — join the waitlistEvidence dated 2026-10-07, public docs only, not legal advice.
Short answer
Yes, Box can read your files by design (with controls). KeySafe gives you custody of the keys and a kill switch, but Box still decrypts files to preview them and run Box AI, and search indexes, metadata and comments stay on Box-managed keys.
Scored configuration: Box Enterprise with Box KeySafe (customer-managed keys in AWS KMS or GCP Cloud KMS/HSM) and Box Zones for residency.
Default (no KeySafe): Box-managed keys; the report estimates Overall ~58.
Report confidence: Medium-high. Box's DPA document itself wasn't retrieved.
Higher = more customer control / less inherent vendor read access for the scored configuration. A strong SOC 2 doesn't mean the vendor can't read your data.
Box AI works on KeySafe-protected files: file content "processed by Box AI is decrypted securely at query time using customer-managed keys". Full-text search indexes, comments and metadata stay on Box-managed keys.
Evidence: About KeySafeBox's subprocessor list includes OpenAI, Anthropic and SpaceXAI (effective October 5, 2026) for AI/ML. Box says subprocessors may access customer content "to support and/or improve the Box Service".
Evidence: Box SubprocessorsOur report flags these gaps in Box's public documentation:
Get the full 5-dimension PDF — join the waitlist
PDFs aren't for sale yet. Join the waitlist and we'll email yours when it's ready. No calls.
Yes, Box can read your files by design (with controls). KeySafe gives you custody of the keys and a kill switch, but Box still decrypts files to preview them and run Box AI, and search indexes, metadata and comments stay on Box-managed keys. VendorScore rates Box 64/100 overall from public documentation (evidence dated 2026-10-07). Scored configuration: Box Enterprise with Box KeySafe (customer-managed keys in AWS KMS or GCP Cloud KMS/HSM) and Box Zones for residency.
No. Box encrypts data at rest with AES-256 and in transit with TLS 1.3 (falling back to TLS 1.2), which is server-side encryption, not E2EE. Box KeySafe keeps your keys in AWS KMS or GCP Cloud KMS/HSM, and Box says it "never sees or accesses customer managed encryption keys". But Box still decrypts files through your KMS to preview, download or run Box AI on them, and search indexes, comments, metadata and Box Notes stay on Box-managed keys. KeySafe gives you custody and a kill switch, not zero access.
Yes, within their authorization. Box's Product Terms say: "Box Personnel entitled to use Box's data processing systems will only access data within the scope and to the extent covered by the respective access permission (authorization)." Box Personnel includes employees, agents, consultants, contractors and Subprocessors. Box's Trust page describes least privilege and MFA over VPN for system access. VendorScore found no documented customer-approval gate for staff access to content.
No, not by default. Box's Product Terms say: "Box will not train Box AI using Customer queries or outputs or other Confidential Information without explicit consent." Box's security page adds: "Box AI doesn't train on your data." Training would need your explicit consent (opt-in). Box AI does process KeySafe-protected file content, decrypted at query time.
VendorScore doesn't certify compliance; Box's GDPR page at https://www.box.com/gdpr links Box's DPA. We link Box's DPA page but did not review the DPA's content: the DPA document (box.com/legal/dpa) returned an access error when we tried to fetch it.
Box's list (updated September 4, 2026) names AWS, Google, IBM and Microsoft (compute, storage, AI/ML), TaskUs (billing, technical and customer support, Philippines), Zendesk, OpenAI, Anthropic and SpaceXAI. Box says subprocessors and its affiliates "may process, store or otherwise access certain customer information or personal data found in customer Content in order to support and/or improve the Box Service." Customer-enabled AI subprocessors can add more. The list is published at https://www.box.com/legal/subprocessors.
Yes, with the paid Box Zones add-on, which stores content at rest in a region or even a country you choose. Box's terms add that "some processing and metadata storage may continue to be provided from the United States."
Every URL cited on this page. Score, key findings and FAQ: VendorScore report (box.md), evidence dated 2026-10-07.