This analysis describes what Box's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms establish that Box may bill customers automatically for consumption of enterprise-wide service resources (API Calls, AI Units) that exceed entitlements associated with the customer's service level. Previously, the terms only mentioned that 'additional fees will be due' if Platform Use Limits were exceeded, but the new language creates explicit billing procedures, pricing references, and usage control mechanisms. The agreement now authorizes Box to provide usage reports identifying overage, charge customers for excess resource consumption, and implement technical controls including throttling, rate limiting, or temporary service suspension until overage charges are paid. Users can contact Box through its web form or email to dispute usage reports, but the terms reserve all other contractual and statutory remedies to Box.
View change record →How other platforms handle this
In the event that Customer uses the API within an Application which is distributed on third-party platforms (e.g., mobile apps), it is Customer's sole responsibility to comply with any and all requirements and terms of service of such third-party platforms.
Because these services are operated by third parties, we don't control them or what information they collect.
We may also ask you to verify your identity by providing a government-issued photo ID through a third-party vendor. This feature is only available to users who are 13 or over.
"(b) to perform hidden activities without Platform Application User consent (such as downloading components or other software)...Excerpt from Box's Terms of Service
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
The clause states: “(b) to perform hidden activities without Platform Application User consent (such as downloading components or other software)...”
ConductAtlas has identified this type of provision across 108 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Box.