For detailed information on the security of Box's servers and services, please see our Security Overview.
Box adheres to the highest industry standards for security so you can share, access, and manage your content with confidence.
- Secure data centers: Your content is stored on enterprise-grade servers that undergo regular audits and are monitored 24/7
- Redundancy: All files are stored in both a primary and backup facility immediately upon upload. This backup process is closely tied to the upload process: Backups occur automatically at the time of content upload, ensuring that your data is protected and available in multiple locations from the start. This process is not dependent on specific clients, but is consistently applied to all customer uploads, regardless of the client used, and this uniform approach ensures that your data is secured and accessible regardless of any individual client preferences or configurations. There is no additional periodic backup process, such as daily backups, because all content is immediately duplicated to the backup facility upon upload.
- All files uploaded to Box are encrypted at rest using 256-bit AES encryption.
- For files in transit, we use TLS 1.2 encryption.
- AD/LDAP integration: Enterprise edition customers can replace Box’s authentication mechanism with their own
Box is also SAS70 Type II and Safe Harbor certified.
If you have further questions about the information shared here, please reach out to your Customer Success Manager or Account Executive who will be able to provide you with the details you need.