Snapshot 8579
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Subprocessors
Last Updated: September 4, 2026
To support Box, Inc. (“Box” or “we”), in delivering the Box Service, we may engage third party service providers (“Subprocessors”) to assist with its data processing activities. Subprocessors and Box’s affiliates and subsidiaries (“Box Group Companies”) may process, store or otherwise access certain customer information or personal data found in customer Content in order to support and/or improve the Box Service. Unless otherwise specified, capitalized terms that are used on this page have the meaning set forth in the Box Terms of Service or in a superseding written agreement between Box and a particular Box customer. This information is provided in compliance with Box's General Data Protection Regulation (GDPR) obligations as a Processor, pursuant to its Processor Binding Corporate Rules Policy and other applicable legal and/or contractual obligations.
Before engaging any Subprocessor, we perform due diligence of such Subprocessor's privacy, information security, and data protection practices. We enter into written agreements with Subprocessors that enforce compliance with applicable data protection laws, security controls, confidentiality and international data transfer requirements. We also restrict Subprocessor access to only what is necessary to maintain and provide the Box Service to our customers. Subprocessors are strictly prohibited from using customer data, Content or personal data for any purpose other than to support Box in providing the Service to its customers.
The following table identifies the Subprocessors used by Box, the type of services that may be provided, and the location where such subprocessing activities are performed.
Subprocessor Category of Services Location
Amazon Web Services, Inc. Analytics, compute, database, artificial intelligence, machine learning, networking, and storage United States of America*
Google, LLC. Analytics, compute, database, artificial intelligence, machine learning, networking, and storage United States of America*
International Business Machines ("IBM") Corporation Analytics, compute, database, artificial intelligence, machine learning, networking, and storage United States of America*
Microsoft Corporation Analytics, compute, database, artificial intelligence, machine learning, networking, and storage United States of America*
TaskUs, LLC. Billing, technical, and customer support Philippines
Zendesk, Inc. User relationship management, customer and user support United States of America
OpenAI Group PBC Artificial intelligence, machine learning United States of America
Anthropic PBC** Artificial Intelligence, machine learning United States of America
SpaceXAI LLC*** Artificial Intelligence, machine learning United States of America
*And other regions if selected by the respective customer
** Unless restrictions apply
***Effective October 5, 2026. Note, the effective date may differ based on the specific terms of your agreement with Box.
Customer Enabled AI Subprocessors
Pursuant to applicable agreement(s), Box may from time to time make available to certain customers additional Subprocessors to provide optional customer enabled artificial intelligence and machine learning services (“Customer Enabled Model(s)”). These services may include advanced AI models, upgraded Box AI features, and enhanced capabilities that are activated upon customer request and/or otherwise when a customer explicitly enables it in the administrative console. By selecting Customer Enabled Model(s), customer acknowledges that their data may be processed by additional Subprocessors listed here.
As our business and technical requirements change, we may from time to time remove or add Subprocessors, or we may engage an existing Subprocessor to perform additional services for us, if we believe that doing so will enhance our ability to deliver the Box Service. We will periodically update this page to reflect changes to our Subprocessors. If you wish to receive notifications of updates to this Box Subprocessors Page, please click here. If you have any questions about our subprocessing activities, please contact privacy@box.com.
The following entities are members of Box Group Companies:
Box Group Member Name Country
KK Box Japan Japan
Box Intl. Holdings Ltd. United Kingdom
Box Intl. Technology Ltd. United Kingdom
Box.com (UK) Ltd. United Kingdom
Box France SARL France
Box Deutschland GmbH Germany
Box Canada, Inc. Canada
Box.com Australia Pty Ltd. Australia
Secure Cloud Collaboration Sweden AB Sweden
Box Netherlands BV Netherlands
Box, Inc. United States of America
Box Poland Spółka z ograniczoną odpowiedzialnością Poland
blank