Box updated its Terms of Service on July 11, 2026, adding 248 sentences and modifying 11 existing sentences. The change introduces a new section on 'Excess Consumption' that establishes billing mechanisms for overage charges when users exceed resource entitlements (such as API Calls and AI Units). The updated terms also add provisions requiring electronic-only notice submission and expand user responsibility to include service resource consumption beyond base subscription limits. Users may now receive billing for overage usage at Box's discretion, and Box reserves the right to implement usage controls including throttling or temporary suspension until overages are paid.
The updated terms establish that Box may bill customers automatically for consumption of enterprise-wide service resources (API Calls, AI Units) that exceed entitlements associated with the customer's service level. Previously, the terms only mentioned that 'additional fees will be due' if Platform Use Limits were exceeded, but the new language creates explicit billing procedures, pricing references, and usage control mechanisms. The agreement now authorizes Box to provide usage reports identifying overage, charge customers for excess resource consumption, and implement technical controls including throttling, rate limiting, or temporary service suspension until overage charges are paid. Users can contact Box through its web form or email to dispute usage reports, but the terms reserve all other contractual and statutory remedies to Box.
The updated terms establish explicit, automated billing procedures and service suspension mechanisms for overage consumption of API Calls and AI Units. Previously, overage language was discretionary and general; the new section creates specific billing procedures, usage reporting rights, and technical control authority that may be automatically enforced without explicit customer authorization for each overage event. Organizations integrating Box APIs or relying on continuous Box availability in production systems should evaluate whether these new suspension rights conflict with existing customer commitments or operational requirements.
→ Review your service level entitlements at box.com/pricing to understand baseline resource limits and associated overage costs.
→ Monitor API call and AI Unit consumption within your Box environment to stay within your contracted entitlements and avoid automatic overage charges.
→ Contact your Box account administrator or support if you anticipate approaching or exceeding your resource entitlements, to discuss usage optimization or service plan upgrades before overage charges accrue.
→ If resource usage exceeds entitlements, Box will automatically bill your registered payment method for overage charges at rates published on box.com/pricing/platform.
→ If overage charges remain unpaid, Box may implement throttling, rate limiting, or suspend your account access until the balance is fully paid, regardless of whether service interruption disrupts your operations.
→ Overage charges do not qualify for refund or credit even if you cancel your account within a refund-eligible period, per the clarified cancellation language.
Establishes automatic billing for overage of consumable resources (API Calls, AI Units) and grants Box discretion to implement usage controls including throttling, rate limiting, or suspension until overages are paid.
Clarifies that customers remain responsible for Excess Usage charges even when submitting cancellation requests, and such charges do not qualify for prorated refunds.
Restricts customer notice to Box to electronic channels only (email, web form, in-service feature) and explicitly states Box will not process or respond to physical mail or in-person written/verbal notices.
This change record describes what was added, removed, or modified in the document. Analysis reflects what the updated agreement states or permits. It does not constitute a legal determination about enforceability. Applicability may vary by jurisdiction. Methodology
If your organization uses more API calls or AI Units than your subscription level includes, you are responsible for paying Box's stated fees for the overage.
Box can slow down or shut off your access if you exceed your resource limits or owe overage charges, and access remains restricted until you pay the bill.
Box can automatically charge your registered payment method for API and AI Unit overages without separate authorization for each overage event.
Your responsibility for charges now explicitly includes overage of consumable resources, not just the base service fee.
Box introduced a formal 'Excess Consumption' billing regime (Section 23.2) that converts discretionary overage language into specific operational procedures: usage reporting, automated billing authorization, and service suspension rights. The change affects any organization integrating Box APIs or using Box AI Units in production environments. Organizations should audit their vendor contracts and data processing agreements to confirm these new billing and suspension mechanisms are compatible with existing service-level agreements and customer commitments. The change does not appear to create new GDPR or CCPA obligations directly, but organizations reselling or integrating Box services into downstream offerings may need to evaluate whether these new suspension and billing mechanisms affect their own SLAs or consumer disclosures. No specific regulatory compliance action is indicated by this change alone, but the suspension-rights language warrants review in industries with availability or continuity requirements (finance, healthcare, critical infrastructure).
Full compliance analysis
Obligation analysis, escalation trigger, board language, and recommended action.
Monitor: regulatory citations + obligations. Compliance: full compliance memo.
ConductAtlas provides verified policy intelligence sourced directly from platform documents. All analysis is intended to support, not replace, legal and compliance review. Record CA-C-003623.
Get alerted when this policy changes again — including what changed and why it matters.
Prefer a weekly summary instead?
Get the biggest policy changes across 352+ platforms every Sunday.