This analysis describes what Box's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
A user's account and all Content within it can transfer to organizational control without further action by the user if they miss the 14-day response window.
Interpretive note: The excerpt references a prior 'notice attempt' that is defined elsewhere in the agreement and not quoted here. The canonical claim preserves 'may' as a qualifier reflecting the conditional nature of the account transfer.
The updated terms establish new billing obligations for consumable service resources. Users are now explicitly responsible for charges related to API calls and AI Units consumed beyond their service entitlements. Box reserves the right to monitor resource usage, report overages to the billing contact, and automatically charge the payment method on file for excess consumption. If usage exceeds entitlements, Box may implement throttling, rate limiting, or temporary service suspension until the overage is remedied and all charges are paid. Additionally, all written notices to Box must now be submitted electronically through Box-provided channels; Box will not process notices sent by mail or delivered in person.
View change record →A reader who uses an email address owned or controlled by an organization and fails to change it within 14 days of a notice attempt may lose individual control of their account and Content to that organization.
How other platforms handle this
Any account without an active subscription may be deleted if it remains inactive...for a continuous period of at least six (6) months.
Where an Admin Entity has requested control of an existing Administered Account, Canva will make reasonable efforts to provide you with advance notice so that you can transfer your content and designs to a personal Canva account...before your Admin Entity receives control.
You must provide accurate and complete information to register for an account to use our Services.
"Fourteen (14) days after that notice attempt, if you do not change the email address associated with your account to one not owned or controlled by that organization, you agree that your account - and any Content associated with your account - may become directly managed by the organization.Excerpt from Box's Terms of Service
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
A user's account and all Content within it can transfer to organizational control without further action by the user if they miss the 14-day response window.
A reader who uses an email address owned or controlled by an organization and fails to change it within 14 days of a notice attempt may lose individual control of their account and Content to that organization.
ConductAtlas has identified this type of provision across 257 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Box.