Box AI

Business Starter Tier Ratings

Last Reviewed: 2026-03-23

Not designed for content creation. Box AI queries documents, doesn't create marketing content.

Can analyze past grants stored in Box. Not a grant writing tool. Use Claude/Gemini for drafting.

Not a donor engagement platform. Can summarize donor docs if stored in Box.

Can query and summarize program files. Limited to 100GB total storage.

Can summarize board documents. Basic AI queries only at this tier.

Can summarize training materials stored in Box. Not a training platform.

Not designed for social content creation.

Not an email marketing tool.

Basic single-doc queries. Multi-doc research requires Enterprise Plus.

Can summarize policy documents. Limited features at this tier.

Not an event planning tool.

Can query financial documents. Not a financial reporting tool.

Does not train on content

Box Terms of Service (Dec 1, 2025, Section 25.3) explicitly states Box will not train Box AI using customer queries or outputs without explicit consent. AI providers (OpenAI, Anthropic, Google) contractually bound not to retain or train on data. Prompts and outputs deleted once document is closed.

Not needed

Training is disabled by design. No opt-out required. Box AI can be disabled entirely via Admin Console.

Never

No human review of customer content by Box. Box AI processes queries via third-party AI providers under zero-retention agreements.

Immediate deletion

AI prompts and outputs deleted when document is closed. AI providers delete data immediately after returning response.

Enterprise grade

SOC 1/2/3 compliance support. SSL and at-rest encryption. Two-factor authentication. ISO 27001, NIST AI RMF alignment. HIPAA and PCI DSS require Enterprise tier or above.

Only Useful If You Use Box

Box AI queries documents stored in Box. If your files are in Google Drive, Dropbox, or SharePoint, Box AI provides zero value. This is an AI layer for Box users, not a standalone AI tool.

10 Free Licenses + 50% Off for Nonprofits

Via Box.org and TechSoup verification: 10 free perpetual licenses for Box Starter, or 50% off any Business plan. Requires 501(c)(3) or equivalent and TechSoup Validation Token. Verified on TechSoup as of March 2026.

Admin-Controlled Opt-Out

Individual users cannot disable Box AI. Admins must enable/disable via Admin Console → Box AI tab → Settings. Can control for entire organization or specific users/groups (up to 100). As of November 4, 2025, Box AI is enabled by default for new customers. Contact your administrator if you need AI disabled.

Multi-Doc AI Requires Enterprise Plus; Custom Agents Require Enterprise Advanced

Business plans get single-doc AI Q&A and Box AI for Notes. Multi-doc queries (10 files), Box Hubs AI, and Box AI for Slack require Enterprise Plus (~$25/user nonprofit). Box AI Studio (custom AI agents), Box Automate, and Box Extract UI require Enterprise Advanced (custom pricing, 35+ users).

Enterprise-Grade Compliance

SOC 1/2/3, ISO 27001, HIPAA (with BAA on Enterprise+), PCI DSS, FedRAMP High (Enterprise Plus/Advanced), FedRAMP Moderate (Enterprise), FINRA, GDPR, NIST AI RMF alignment. Excellent for regulated industries (healthcare, finance, government). Note: HIPAA requires Enterprise tier or above.

Not a General AI Assistant

Box AI queries your documents, it doesn't write grants, create marketing content, or answer questions outside your files. Use Claude, Gemini, or ChatGPT for content creation.

NO AI TRAINING ON YOUR DATA

Box Terms of Service (December 2025, Section 25.3) explicitly states: 'Box will not train Box AI using your queries or outputs without explicit consent.' AI providers (OpenAI, Anthropic, Google) delete data immediately after returning response. Prompts and outputs deleted when document is closed.

MCP Server for Third-Party AI Agents

Enterprise Plus and Enterprise Advanced plans include the Box MCP Server, enabling secure access to Box content from third-party AI agents (Claude, Microsoft Copilot Studio, Salesforce Agentforce, etc.). Box's security policies and permissions are enforced for all agent interactions.

2026-03

Multi-Doc Q&A and Box AI for Notes launched on Box Mobile (March 2026). Users can now select up to 10 files for multi-doc queries on mobile and access Box AI within Box Notes on mobile.

2025-12

Box Terms of Service updated (effective December 1, 2025). New Section 25.3 explicitly states Box will not train Box AI using customer queries or outputs without explicit consent. EU Data Act compliance language added.

2025-11

Box Privacy Notice updated for new customers (effective November 4, 2025). Box AI enabled by default for new customers on Business Starter, Business, Business Plus, Enterprise, and Enterprise Plus plans. Updated notice clarifies how data is processed when AI features are used.

2025-10

Box AI API access expanded to Business, Business Plus, and Enterprise plans (effective October 20, 2025). These tiers now have access to Box AI Foundation Agents via API (Q&A, Text Generation, Extract APIs). AI Units now purchasable by all tiers.

2025-03

Box achieves FedRAMP High Authorization in FedRAMP Marketplace (March 27, 2025), including Box AI and Box Hubs. Available on Enterprise Plus and Enterprise Advanced plans. Builds on 2024 VA agency-level ATO.

2025-01

Box Enterprise Advanced plan launched (January 14, 2025). Includes Box AI Studio (custom AI agents), Box Apps, Box Doc Gen, 500GB file uploads, 20K AI Units. AI Studio is Enterprise Advanced only—not included in Enterprise Plus.

For organizations with 5+ staff

Good if using Box for document management. Business at ~$7.50/user (nonprofit) is competitive for cloud storage with basic AI Q&A. Enterprise Plus (~$25/user) for full AI features: multi-doc queries, Box Hubs, FedRAMP High. Enterprise Advanced (custom, 35+ users) for organizations needing custom AI agents and workflow automation.

For organizations with fewer than 5 staff

Only if already using Box. 10 FREE perpetual licenses via Box.org. For most small nonprofits, FREE Google Workspace + Gemini + NotebookLM is better value. Note: Box AI is now enabled by default for new customers.

For health data or vulnerable populations

EXCELLENT for compliance-heavy orgs. HIPAA (with BAA) on Enterprise and above. FedRAMP High on Enterprise Plus and Enterprise Advanced. SOC 2, ISO 27001. 50% nonprofit discount. Full AI features at Enterprise Plus (~$25/user nonprofit).