2 Documents
9 All provisions 3 High severity 5 Medium severity 1 Low severity
3 Changes · 12 mo
Jul 25, 2026 Last change

High, provisions that significantly limit your legal rights, authorize broad data collection, or create material financial exposure. Medium, provisions worth knowing about but with partial protections or limited scope. Low, standard terms with minimal consumer impact.

Objective measurements
Counted directly from the archive for Box — documents, captured versions, and detected changes.
2
Documents tracked
4
Versions captured
3
Changes · 12 mo
3
Changes · all-time
6.5 d
Avg between changes
18
Days since change
7 d
Longest stable stretch
ConductAtlas User-Protection Index
Insufficient coverage
Insufficient coverage to score
Only 1 of 6 governance dimensions are confidently known for Box — too few for a headline score. What we do have is shown below.
How is this scored? →

Higher = more protective of you, the user/customer — a deliberately user-protective lens, not a universal “good vs bad” score. Computed algorithmically from Box’s cited governance stances; no dimension we haven’t confidently read is ever counted against the score. Free, reproducible, and never purchasable.

Consumer tier · insufficient coverage (scored on 1 of 6)
Arbitration & class action weight 22% 0.0
Data sharing & sale weight 20% not stated
AI training on your data weight 18% not stated
Data retention & deletion weight 15% not stated
Content ownership & licence weight 15% not stated
Liability & warranties weight 10% not stated
Governance Coverage
Contract Terms
13 provisions · 1 high · 7 med
Developer Api
12 provisions · 10 high · 2 med
Payment Fees
10 provisions · 6 high · 3 med
Acceptable Use
10 provisions · 8 high · 2 med
Account Control
9 provisions · 4 high · 5 med
Intellectual Property
8 provisions · 1 high · 6 med
Liability Limitation
8 provisions · 5 high · 3 med
Ai Automated
7 provisions · 5 high · 2 med
Enforcement Actions
7 provisions · 5 high · 2 med
Legal Jurisdiction
7 provisions · 6 med
Quick Facts
Arbitration: Not stated
AI Training: Not stated
Data Retention: Not stated
Class Action: Waived
Key Governance Provisions
High Aggregate liability cap at 1.5x fees or $100

The cap severely restricts the maximum financial recovery a user could obtain from Box regardless of the magnitude of harm suffered.

High Content sharing may grant third parties unrestricted access

Sharing Content may result in third parties gaining unrestricted use of that Content with no obligation to compensate or seek further permission from the user.

High Organization takeover of domain-linked accounts

A user's account and all Content within it can transfer to organizational control without further action by the user if they miss the 14-day response window.

High Box will not train AI on user queries without explicit consent

Users retain control over whether their AI interactions are used to train Box's AI models, as this requires affirmative explicit consent.

High Annual plan locked no downgrade until anniversary

Users are locked into their selected service level and seat count for the full annual term, preventing cost reduction or exit before renewal.

Document Coverage
Privacypolicy Termsofservice
Last change detected: Jul 25, 2026 Changes (12 months): 3 Documents monitored: 2 Provisions tracked: 9
Compare With Similar Platforms
ActiveCampaign Airtable Amazon Marketplace Amplitude Apple App Store Asana Auth0 Bumble

Documents

Box Privacy Policy

Last updated May 5, 2026 · Privacy policy
0 provisions 0 versions captured Version history →

Box Terms of Service

Medium

Box's Terms of Service set out the rules for using its storage and collaboration service. Box can suspend or shut down your account at any time in its sole discretion, …

Last updated May 5, 2026 · Terms of service
9 provisions 4 versions captured 1 significant change Version history →

Recent Changes

July 11, 2026 · Box Terms of Service Medium

Box updated its Terms of Service on July 11, 2026, adding 248 sentences and modifying 11 existing sentences. The change introduces a new section on 'Excess Consumption' that establishes billing …

View change record →
📈 Policy Drift Analysis View all changes →

Low Severity Provisions (1)

View all high severity provisions → Compare Box with other platforms →

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Applicable Regulations

CCPA/CPRA
California, USA
View official text ↗
Colorado AI Act
US-CO
View official text ↗
CFAA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
CAN-SPAM
United States Federal
View official text ↗
DMA
European Union
View official text ↗
DSA
European Union
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FAA
United States Federal
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Texas AI Act
Texas, USA
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗

Compare with Similar Platforms

ActiveCampaign
platform
Airtable
platform
Amazon Marketplace
platform
Amplitude
platform
Apple App Store
platform
Asana
platform
Auth0
platform
Bumble
platform

Frequently Asked Questions

What Box documents does ConductAtlas track?

ConductAtlas tracks 2 Box documents including terms of service, privacy policy, and other governance documents. Every document is captured daily with cryptographic verification.

How many policy changes has Box made in the past year?

Box has made 3 policy changes in the past 12 months across the documents ConductAtlas tracks.

How many provisions has ConductAtlas classified for Box?

ConductAtlas has classified 9 provisions across Box's tracked documents. 3 are rated high severity, 5 medium, and 1 low.

Can I get alerts when Box changes their policies?

Yes. Monitor subscribers ($4.99/month) can add Box to their watchlist and receive same-day email alerts whenever any tracked document changes.