Does Box AI train on your data? (Business plans)
Doesn't train by default
Doesn't train on business data by default.
"Box does not train on any data, nor do any vendors train on any data that is sent from Box." Only with customer approval.
Why this matters: A "no" keeps your prompts and files out of Box's models, where they couldn't be removed later. Confirm it covers the plan you use. Why training matters →
Below: retention, SOC 2, ISO 27001/42001, DPA, BAA, data residency and zero-retention for Box AI, each linked to Box's own page.
Trains on your data by default
"Box does not train on any data, nor do any vendors train on any data that is sent from Box." Only with customer approval.
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
Data retention
Model provider keeps information in memory only for the time needed to return the response.
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
SOC 2 Type II
Box compliance page blocked automated fetch.
- box.com/ai/trust · checked Oct 17, 2026
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
ISO/IEC 27001
Not stated on the Box pages we checked.
- box.com/ai/trust · checked Oct 17, 2026
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
ISO/IEC 42001
Not stated on the Box pages we checked.
- box.com/ai/trust · checked Oct 17, 2026
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
DPA available
Not stated on the Box pages we checked.
- box.com/ai/trust · checked Oct 17, 2026
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
BAA / HIPAA
Not stated on the Box pages we checked.
- box.com/ai/trust · checked Oct 17, 2026
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
Data residency options
Box Zones: store content in 10 regions.
- box.com/ai/trust · checked Oct 17, 2026
Zero-retention option
Providers keep data in memory only for the response.
- support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions · checked Oct 17, 2026
Vendor pages we monitor for this tool
We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.
| Page | Checked | Fingerprint |
|---|---|---|
| https://www.box.com/ai/trust | Oct 17, 2026 | 5231a9ff1084… |
| https://support.box.com/hc/en-us/articles/45720614801171-Box-AI-Frequently-Asked-Questions | Oct 17, 2026 | b951d8d0a61c… |
Compare with
- Dropbox Dash / Dropbox AI Doesn't train
- Adobe Firefly Doesn't train · Design, same training default
- Airtable AI Doesn't train · Productivity, same training default
See all Content tools · Why AI training on your data matters · How we source and verify this