• Information and Communications Technology
  • Cloud Computing
  • SaaS Providers


Swiss-U.S. Privacy Shield Framework: Active

Original Certification Date: 8/8/2017
Next Certification Due Date: 10/27/2021
Data Collected: NON-HR

EU-U.S. Privacy Shield Framework: Active

Original Certification Date: 10/5/2016
Next Certification Due Date: 10/27/2021
Data Collected: NON-HR

Purpose of Data Collection

The primary purpose for processing data is to provide the Box service required pursuant to a contractual agreement/legal obligation. The Box Cloud Content Management platform provides a secure way to share content and improve collaboration on any device. Box offers companies of all sizes a platform for file synchronization and sharing that makes collaboration effective across devices, teams and organizations. For additional information, please refer to the Box Privacy Notice: Box does not have insight into the type of data collected or processed by customers. Box may share information with service providers (sub-processors) working on Box's behalf and restricts service provider access to only what is necessary to provide the Box service to the customer and any of its users. For additional information on Box's sub-processors, please refer to the Box Subprocessor Page:

Privacy Policy

Non-HR Data


The Box Privacy Notice explains how information (including personal data as defined under GDPR) is collected, retained, used, disclosed, and transferred by Box and the available choices individuals have with regard to their personal information.

Effective Date: 12/7/2020

Verification Method


Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Box, Inc. at:

Leah Perry
Senior Director, Global Policy and Privacy
Box, Inc.
900 Jefferson Ave., Redwood City, CA 94063
900 Jefferson Avenue
Redwood City, California 94063

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Box, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


Appropriate statutory body with jurisdiction to investigate any claims against Box, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission