Box

What is Box?

Box offers secure content management and collaboration for individuals, teams and businesses, enabling secure file sharing and access to your files online.

Box has transformed the way we share, manage and collaborate on our most valuable information. Designed without compromise between security and ease-of-use, Box allows every users to securely work across teams — on any device, anywhere.

Adopting Box as our secure content platform keeps sensitive documents out of email and away from insecure consumer services.

EASe of use

Box offers a number of ways to upload files into our portal:

• Drag and Drop: Drag files from your desktop to the files page in Box. Your files will be uploaded and will appear in the folder where you dropped them.

• Upload Files and Folders using the File Browser
• Upload files using the Box App on your Smartphone (Windows, iOS or Android).

Deploy Data Retention

Businesses often struggle with what data must be kept for litigation and regulatory purposes, as well as deciding what information can be destroyed so it does not end up becoming an issue later. With data retention capabilities, Box enables you to meet legal, regulatory and business mandates around the retention of your business content. 

• Retain Documents: Easily implement automated policies to preserve business-critical documents for any specified time period to comply with legal and regulatory mandates such as FINRA 17a-4, PCI, SOX and HIPAA.
• Decrease Potential Liabilities: Reduce your business risk by only keeping the documents you are required to save using Retention Management and automatically delete all else.
• Reduce Information Silos: Box can be the single system through which employees can create and collaborate on documents, reducing information sprawl and giving administrators a centralised way to set policies for automatic expiration, archival or deletion of content.

Maintain Compliance Globally

Box enables you to stay compliant in the Cloud.

• Safely Leverage Box Globally: Box enables customers to leverage the scale and economics of the cloud all over the world by complying with internationally recognised standards.
• Gain Increased Transparency: Leverage independent third-party assessments to determine how effectively Box protects your information in the cloud. Ask for Box reports including SOC 1 (SSAE16) Type II, SOC 2 Type II and SOC 3 to understand the controls in place to maintain the security, availability and confidentiality of your data.
• Comply with Industry Requirements: Box has invested in processes and expertise to help ensure compliance with regulations such as HIPAA/HITECH, SEC 17a-4 (FINRA), PCI DSS.

Box Security

Box takes every precaution to make sure your confidential information stays that way.

• HIPAA Compliance Box provides the administrative, technical and physical safeguards to support your organisation’s compliance with HIPAA.

• Certified for EU and Swiss Safe Harborframeworks for the collection and use of personal data from European member countries.

Box Reporting, Logging and Audit Trails

Track account activity, file access, settings changes and nearly everything else that occurs in Box.

• Full Transparency: See user activity with reports on over 50 different events across seven different categories.
• Reporting and Audit Trails: Create detailed reports or integrate events into SIEM applications like HP ArcSight, Splunk and SumoLogic.
• Follow Users and Activity: Track usernames, email and IP addresses. See timestamps for every action through the Box Admin Console and the reporting API.

Control Access, Authentication and Authorisation

Easily configure permissions for your organisation to ensure that the right people have the right level of access to company information.

• Strong Authentication: Customise password strength requirements, resets, failed logins, session duration, two-factor authentication and single sign-on integration.
• Granular Authorisation: With seven levels of permission for access, preview, editing and sharing, you can ensure individual users and groups can only see what they need to.
• Flexible Access Controls: Password-protect confidential presentations and financial documents. Set automatic expiry dates for sensitive files.
• Enterprise Mobility Management Partnerships: Box works with leading EMM providers to offer additional security, configuration and device management.

Data Protection: Encryption and Security Policies

Box protects the confidentiality and integrity of your files in transit and at rest.

• Layered Encryption: Encryption in transfer with high-grade TLS and multi-layered encryption at rest with 256-bit AES. Encryption keys are securely stored in separate locations.
• Enterprise Key Management (EKM): Box provides the option of customer-managed encryption keys protected in a Hardware Security Module (HSM) with an unchangeable audit log of key usage.
• Data Integrity: Version, deletion and expiry controls protect the integrity of your content.
• Content Security Policies: Prevent data loss with alerts of unusual download activity, shared files with sensitive information and uploads with prohibited data.

Data Centre Security and Availability

Box uses multiple data centres with several providers to build redundancy into Box services. All data centres employ a variety of secure mechanisms, including strict access policies plus secure vaults and cages.

• Secure Locations: The Data centres use biometric entry authentication, closed-circuit video monitoring and 24/7 armed guards.
• System Redundancy: N+1 or greater redundancy for all network components and system components.
• Threat Protection and Prevention: Uninterruptible power and backup systems as well as fire/flood detection and prevention are used at storage sites.