This analysis describes what Box's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
The updated terms establish new billing obligations for consumable service resources. Users are now explicitly responsible for charges related to API calls and AI Units consumed beyond their service entitlements. Box reserves the right to monitor resource usage, report overages to the billing contact, and automatically charge the payment method on file for excess consumption. If usage exceeds entitlements, Box may implement throttling, rate limiting, or temporary service suspension until the overage is remedied and all charges are paid. Additionally, all written notices to Box must now be submitted electronically through Box-provided channels; Box will not process notices sent by mail or delivered in person.
View change record →How other platforms handle this
Our Chatbots may generate outputs that are inaccurate or inappropriate for your situation, so you should not rely solely on their answers. You should always verify the accuracy of such information
You will use independent judgement and discretion before relying on or otherwise using Output.
You understand that Virtual Assistants responses are intended to be suggestions for your consideration only and you agree that you will exercise reasonable discretion before relying on any Virtual Assistant's response.
"To the extent you enter personal data or other sensitive information subject to regulatory oversight in Box AI queries, you, and not Box, have sole responsibility for providing any legally adequate privacy notices and obtaining any necessary consents for such processing.Excerpt from Box's Terms of Service
How Meta, TikTok, and Supabase restructured governance language across documents, jurisdictions, and consent frameworks through incremental document updates.
How 10 AI platforms describe the use of user data for model training, improvement, and development, based on archived governance provisions.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “To the extent you enter personal data or other sensitive information subject to regulatory oversight in Box AI queries, you, and not Box, have sole responsibility for providing any legally adequate privacy notices and obtaining any necessary consents for such processing.”
ConductAtlas has identified this type of provision across 210 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Box.