Security measures for Business and Enterprise customers

Security is of utmost importance at Box.net, which is why the latest security techniques have been built in from the ground up.

In addition to a 99.9% network uptime guarantee, Business and Enterprise customers benefit from:

• 256-bit SSL encryption that encrypts data on transfer and on the server.
• Sophisticated password policy enforcement including complexity requirements, password history, and forced reset.
• Administrative auditing using an admin console to create and manage users and their permissions.
• AD/LDAP integration to replace Box.net's authentication mechanisms (available to Enterprise customers only).
• Additional user permission types above and beyond Editor and Viewer: Preview-only and Upload-only.
• Additional security tools for users such as adding a password to shared links and setting expiration dates to stop files from being shared after a certain amount of time.
• Reporting tools that give visibility into all user activity on all files over time.

Share, manage and access your content with confidence

We also commit extensive resources towards implementing, monitoring and maintaining our security infrastructure including constant monitoring of production systems, ongoing threat assessment, rapid deployment of the latest security technologies and the use of highly scalable and redundant online infrastructures.

• Protection at the facilities level

  Box.net hosts its servers at two enterprise-grade data centers with ongoing audits, 24 x 7 x 365 monitoring and video surveillance, on-site security staff, mantraps, and strict access controls. All power and environmental systems are in an N+1 redundant configuration to ensure fault tolerance. Multiple power feeds, UPS devices, and onsite backup diesel generators ensure continuous operation and robust infrastructure. Data is automatically backed up to a geographically separated site. This ensures that we always have multiple copies of your data to ensure the highest level of protection. When you use Box.net, you get the benefit of backing up offsite without the additional hassle and cost.

• Protection at the network level

  Servers reside behind a sophisticated firewall that selectively grants access to network resources. An Intrusion Detection System (IDS) continuously monitors network traffic to scan for the latest threats. Additionally, Box.net utilizes multiple internet backbone connections to provide routing redundancy and high performance connectivity. External penetration testing is performed to validate system functioning and security.

• Protection at the application level

  When you upload a file to Box, it’s private by default. Your files are only accessible to others if you share them or make them public. You can make any shared file private again. If you share a file using a link, that link will contain a unique ID made up of a randomly generated combination of letters and integers so humans cannot guess the location of those files. We disallow indexing of public files by search engines or robots, and all file names are encoded once they arrive on our servers. Additional security controls are available with the Business and Enterprise plans. Learn more.

• Protection at the user level

  Box uses proven password and privilege techniques to validate access to all application data. Additional user and password controls are available with the Business and Enterprise plans. For example, administrators control user privileges, limiting what they can see and do on Box and can set granular permissions such as read-only and blind upload. Learn More.

• Protection of your privacy

  We take your privacy very seriously and have self-certify compliance with Safe Harbor. Review our Privacy Policy for more information.