Box AI Footnotes
What Box's AI features do with your data, as Box publishes it. Checked October 31, 2026. Box in the Directory.
Agent access
Official hosted Box MCP server at https://mcp.box.com, which an admin enables in the Admin Console, and the Box AI API (Q&A, text generation and extract endpoints). The MCP server is available on all Box plans; calls from a published integration with the user's own Box login are free, other calls are metered, and AI tool calls use AI Units. The self-hosted community server is deprecated. source, source 2, source 3, source 4 · checked October 31, 2026
Box AI (questions, summaries and drafting in AI Home, Preview, Notes and Hubs; Box Agent)
Box Business plans and above
| On by default? | On for new customers only: Box AI is enabled for customers new as of November 4, 2025, on Business Starter, Business, Business Plus, Enterprise and Enterprise Plus; the updated Privacy Notice behind this change does not apply to customers existing on or before November 3, 2025. An organization that has not fully enabled Box AI turns it on with Enable Box AI in the Admin Console. AI Home, Files, Notes, Hubs and Official Box Integrations each default to Enable for all managed users. source, source 2, source 3, source 4 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Admin Console > Box AI > Settings, then Configure for each service (AI Home, Files, Notes, Hubs, Official Box Integrations) and choose Disable for all managed users, or enable for selected users and groups (up to 100 names and 100 groups). source, source 2 · checked October 31, 2026 |
| Trains on customer data? | No. Box says customer data does not train the AI models without explicit permission. source · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Core models from OpenAI, Google, Anthropic, Meta and Mistral AI. Model cards name the hosting layer, for example Amazon Web Services for Anthropic models and IBM for Meta Llama. Admins can turn on further customer-enabled models, some with added terms or pricing. source, source 2, source 3 · checked October 31, 2026 |
| Price | Included from Business plans up: unlimited questions on a single document or image and Box Notes drafting. Multi-document querying and Box AI for Hubs, Drive and Slack come on higher plans. Interactive use in the Box web app does not use AI Units, within a daily Box Agent quota. source, source 2 · checked October 31, 2026 |
Box AI Studio (custom agents)
Box Enterprise Advanced
| On by default? | Not published as of October 31, 2026 |
|---|---|
| How an admin turns it off | Admin Console > Box AI > Settings > Box AI Studio Configurations, then Enable for all or Disable for all; AI Home must be enabled first. The Models tab on the same page lets admins enable or disable individual models for the Box Agent and custom agents. source, source 2 · checked October 31, 2026 |
| Trains on customer data? | No. Box says customer data does not train the AI models without explicit permission. source · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Core models from OpenAI, Google, Anthropic, Meta and Mistral AI. Model cards name the hosting layer, for example Amazon Web Services for Anthropic models and IBM for Meta Llama. Admins can turn on further customer-enabled models, some with added terms or pricing. source, source 2, source 3 · checked October 31, 2026 |
| Price | Included in Enterprise Advanced only. Custom agents in Standard Mode do not use AI Units; agents in Expanded Mode, in Box Automate workflows or called through the API do. source, source 2 · checked October 31, 2026 |
Box Extract (metadata extraction agents)
Box Enterprise Advanced; Box Extract Agent APIs on Business plans and above
| On by default? | Once Box AI is enabled, the Box Extract setting defaults to Enable for all managed users. File Metadata Autofill in Preview is off by default. source, source 2 · checked October 31, 2026 |
|---|---|
| How an admin turns it off | Admin Console > Box AI > Settings > Box Extract > Edit Configuration, then Disable for all managed users or choose users and groups. source · checked October 31, 2026 |
| Trains on customer data? | No. Box says customer data does not train the AI models without explicit permission. source · checked October 31, 2026 |
| Retention | Not published as of October 31, 2026 |
| Where data is processed | Not published as of October 31, 2026 |
| Model providers | Core models from OpenAI, Google, Anthropic, Meta and Mistral AI. Model cards name the hosting layer, for example Amazon Web Services for Anthropic models and IBM for Meta Llama. Admins can turn on further customer-enabled models, some with added terms or pricing. source, source 2, source 3 · checked October 31, 2026 |
| Price | Consumption: extraction uses AI Units. Enterprise, Enterprise Plus and Enterprise Advanced include 1,000, 2,000 and 20,000 AI Units a month; Business and Business Plus buy them. Unused units expire at the end of each period. source, source 2, source 3 · checked October 31, 2026 |
Compliance
- FedRAMP: Box's documentation says Box Drive in FedRAMP mode meets the requirements for FedRAMP Certified, Class D (formerly FedRAMP High Authorized). For Box AI, each model card lists its own frameworks: for example FedRAMP Moderate for Claude Sonnet 5.5 on AWS and FedRAMP High for Gemini 3.8 Flash; other models list N/A. source, source 2, source 3 · checked October 31, 2026
Not published by Box as of October 31, 2026
- Retention of Box AI prompts and responses, and whether model providers retain them
- Regions where Box AI processing runs
- A release stage for the Box MCP server
- Whether Box AI or the Box Agent connects to outside MCP servers
- Whether Box AI is within Box's HIPAA BAA or FedRAMP authorization
- List prices for Box plans and for additional AI Units
- An EU AI Act statement (Box is not on the European Commission's GPAI Code of Practice or AI Pact signatory lists on 2026-10-31)
Changes
No changes recorded since the first check on October 31, 2026.
How this page is made, and how to send a correction: method.