Box Terms of Service

This document governs the contractual relationship between Box, Inc. and users of its cloud content management and file sharing platform, establishing the legal basis for service access through acceptance of these terms upon use. The agreement states that Box retains the right to modify, suspend, or terminate services at its discretion, and the terms authorize Box to use customer content solely to provide and improve the services while asserting that customers retain ownership of their content. Notably, the document contains a mandatory arbitration clause with a class action waiver, a limitation of liability capping Box's exposure at fees paid in the prior twelve months, and an indemnification obligation requiring users to defend Box against third-party claims arising from their content or use of the service. The agreement engages GDPR, CCPA, and related data protection frameworks given Box's global enterprise user base, with Box's Data Processing Agreement serving as the operative instrument for personal data handling; compliance obligations under these frameworks may constrain some of the broader rights asserted in these terms. Material compliance considerations include the interaction of the arbitration clause with consumer protection laws in certain jurisdictions, the adequacy of consent mechanisms for enterprise versus individual accounts, and the need for organizations to assess whether Box's subprocessor and data residency commitments meet their regulatory obligations.