Box AI

Business Starter Tier Ratings

Last Reviewed: 2026-07-14

Not designed for content creation. Box AI queries documents, doesn't create marketing content.

Can analyze past grants stored in Box. Not a grant writing tool. Use Claude/Gemini for drafting.

Not a donor engagement platform. Can summarize donor docs if stored in Box.

Can query and summarize program files. Limited to 100GB total storage.

Can summarize board documents. Basic AI queries only at this tier.

Can summarize training materials stored in Box. Not a training platform.

Not designed for social content creation.

Not an email marketing tool.

Basic single-doc queries. Multi-doc research requires Enterprise Plus.

Can summarize policy documents. Limited features at this tier.

Not an event planning tool.

Can query financial documents. Not a financial reporting tool.

Does not train on content

Box Terms of Service (effective July 30, 2026, Section 25.3) explicitly states Box will not train Box AI using customer queries or outputs without explicit consent. This language is unchanged from the December 2025 version; the July 2026 ToS update only clarified resource-overage responsibilities and contact processes. AI providers (OpenAI, Anthropic, Google) contractually bound not to retain or train on data. Prompts and outputs deleted once document is closed.

Not needed

Training is disabled by design. No opt-out required. Box AI can be disabled entirely via Admin Console.

Never

No human review of customer content by Box. Box AI processes queries via third-party AI providers under zero-retention agreements.

Immediate deletion

AI prompts and outputs deleted when document is closed. AI providers delete data immediately after returning response.

Enterprise grade

SOC 1/2/3 compliance support. SSL and at-rest encryption. Two-factor authentication. ISO 27001, NIST AI RMF alignment. HIPAA and PCI DSS require Enterprise tier or above.

Box Agent — Autonomous Multi-Step AI (New, April 2026)

Box's biggest AI launch since Enterprise Advanced: the Box Agent (accessed via the new Box AI Home interface) autonomously plans, searches across your entire Box content library, extracts data, and produces finished deliverables (reports, drafts, and—in beta on Enterprise Advanced—Word/PDF/Excel/PowerPoint files) with cited sources. Available on Enterprise Plus and Enterprise Advanced. Operates under Box's existing permissions and no-training architecture; Box states it 'never uses customer data to train third-party large language models.'

Only Useful If You Use Box

Box AI queries documents stored in Box. If your files are in Google Drive, Dropbox, or SharePoint, Box AI provides zero value. This is an AI layer for Box users, not a standalone AI tool.

10 Free Licenses + 50% Off for Nonprofits

Via Box.org and TechSoup verification: 10 free perpetual licenses for Box Starter, or 50% off any Business plan. Requires 501(c)(3) or equivalent and TechSoup Validation Token. Reverified on TechSoup as of July 2026—unchanged since March 2026.

Admin-Controlled Opt-Out

Individual users cannot disable Box AI. Admins must enable/disable via Admin Console → Box AI tab → Settings. Can control for entire organization or specific users/groups (up to 100). As of November 4, 2025, Box AI is enabled by default for new customers. Contact your administrator if you need AI disabled.

Multi-Doc AI and Box Agent Require Enterprise Plus; Custom Agents and Pro/Expanded Modes Require Enterprise Advanced

Business plans get single-doc AI Q&A and Box AI for Notes. Multi-doc queries (10 files), Box Hubs AI, Box AI for Slack, and the new Box Agent/Box AI Home require Enterprise Plus (~$25/user nonprofit). Box AI Studio (custom AI agents on Gemini/ChatGPT/Claude), Box Automate, Box Extract UI, and exclusive Box Agent Pro Mode/Expanded Mode require Enterprise Advanced (custom pricing, 35+ users).

Enterprise-Grade Compliance

SOC 1/2/3, ISO 27001, HIPAA (with BAA on Enterprise+), PCI DSS, FedRAMP High (Enterprise Plus/Advanced), FedRAMP Moderate (Enterprise), FINRA, GDPR, NIST AI RMF alignment. Excellent for regulated industries (healthcare, finance, government). Note: HIPAA requires Enterprise tier or above.

Not a General AI Assistant

Box AI queries your documents, it doesn't write grants, create marketing content, or answer questions outside your files—even the new autonomous Box Agent is grounded exclusively in your Box content. Use Claude, Gemini, or ChatGPT for open-ended content creation.

NO AI TRAINING ON YOUR DATA

Box Terms of Service (Section 25.3, current effective date July 30, 2026, substance unchanged since December 2025) explicitly states: 'Box will not train Box AI using your queries or outputs without explicit consent.' AI providers (OpenAI, Anthropic, Google) delete data immediately after returning response. Prompts and outputs deleted when document is closed. Box's April 2026 Box Agent launch reaffirmed this commitment publicly.

MCP Server for Third-Party AI Agents

Enterprise Plus and Enterprise Advanced plans include the Box MCP Server, enabling secure access to Box content from third-party AI agents (Claude, Microsoft Copilot Studio, Salesforce Agentforce, etc.). Box's security policies and permissions are enforced for all agent interactions.

2026-07

Box Terms of Service updated (new effective date July 30, 2026). Per Box's own community notice, this update only clarifies customer responsibilities for service resource overages (e.g., API Calls, AI Units) and how to contact Box—it does not change pricing or the existing no-AI-training commitment (Section 25.3 unchanged in substance).

2026-04

Box Agent launched (general availability, April 2, 2026): a new autonomous AI capability that searches Box content, reasons through multi-step tasks, and generates finished deliverables (reports, drafts) with cited sources. Available on Enterprise Plus and Enterprise Advanced. Includes new Box AI Home conversational interface. Enterprise Advanced customers get exclusive Pro Mode (advanced reasoning) and Expanded Mode (larger context/higher volume), plus beta ability to generate new files in Word, PDF, Excel, and PowerPoint formats.

2026-04

Box AI Studio enhanced (April 2026): admins can now choose the underlying foundation model (Gemini, ChatGPT, or Claude) per custom agent, and legacy agents can be upgraded to the new agent framework. Remains exclusive to Enterprise Advanced.

2026-03

Multi-Doc Q&A and Box AI for Notes launched on Box Mobile (March 2026). Users can now select up to 10 files for multi-doc queries on mobile and access Box AI within Box Notes on mobile.

2025-12

Box Terms of Service updated (effective December 1, 2025). New Section 25.3 explicitly states Box will not train Box AI using customer queries or outputs without explicit consent. EU Data Act compliance language added.

2025-11

Box Privacy Notice updated for new customers (effective November 4, 2025). Box AI enabled by default for new customers on Business Starter, Business, Business Plus, Enterprise, and Enterprise Plus plans. Updated notice clarifies how data is processed when AI features are used.

2025-10

Box AI API access expanded to Business, Business Plus, and Enterprise plans (effective October 20, 2025). These tiers now have access to Box AI Foundation Agents via API (Q&A, Text Generation, Extract APIs). AI Units now purchasable by all tiers.

For organizations with 5+ staff

Good if using Box for document management. Business at ~$7.50/user (nonprofit) is competitive for cloud storage with basic AI Q&A. Enterprise Plus (~$25/user) now includes the new Box Agent for autonomous multi-doc research and drafting, plus multi-doc queries, Box Hubs, and FedRAMP High. Enterprise Advanced (custom, 35+ users) for organizations needing custom AI agents, Box Agent Pro/Expanded Modes, and workflow automation.

For organizations with fewer than 5 staff

Only if already using Box. 10 FREE perpetual licenses via Box.org. For most small nonprofits, FREE Google Workspace + Gemini + NotebookLM is better value. Note: Box AI is now enabled by default for new customers.

For health data or vulnerable populations

EXCELLENT for compliance-heavy orgs. HIPAA (with BAA) on Enterprise and above. FedRAMP High on Enterprise Plus and Enterprise Advanced (reconfirmed active July 2026). SOC 2, ISO 27001. 50% nonprofit discount. Full AI features, including the new Box Agent, at Enterprise Plus (~$25/user nonprofit).