Organizations can use verified-domain restrictions in Claude Enterprise and ChatGPT Enterprise to help keep work accounts connected to AI tools within the right organization. When an administrator verifies a company email domain and enables the restriction in their AI platform, the platform can use the information Box provides to determine whether a connection is allowed. This helps prevent a company Box account from being connected through a personal or otherwise unauthorized AI organization.
This is available for all Box tariffs, and for organization Claude and ChatGPT plans.
How it works
When a user connects Box to a supported AI platform, Box provides information about the Box account’s email address and whether that address is verified. The AI platform then checks whether the connection meets the organization’s domain restriction and allows or blocks it.
Access is determined by the AI platform organization (e.g., Claude or ChatGPT Enterprise) initiating the connection, rather than the user's login email:
- Allowed: Connections originating from within your verified organization's AI workspace/tenant are permitted.
- Blocked: Connections originating from outside that organization (such as personal accounts or unapproved workspaces) are blocked.
What administrators should know
- Administrators configure the restriction in their AI platform after verifying their company domain. Claude Enterprise manages the setting at the parent organization level and applies it to child organizations.
- In ChatGPT Enterprise, organizations can request restrictions on connecting accounts that use a verified company domain to apps outside authorized workspaces.
- The restriction applies to new connection attempts. Existing connections are not automatically disconnected.
- Claude permits a verified domain to be associated with one organization. Organizations with separately managed Claude accounts should plan domain administration accordingly.
Box documentation on this capability for Claude and ChatGPT is now available.