Security & Compliance – Protect and govern the flow of information
When collaborating securely is one of the most important parts of your job, you need security and compliance you can trust. With this platform, we bring you the very best in security, privacy, and compliance — and it’s built right into our DNA. More than 100,000 organizations use Box to secure their most valuable and highly sensitive data, all while reducing financial, legal, and reputational risk. And we’re proud to have earned their trust.
Zero-trust security controls
Our zero-trust architecture approach ensures teams can collaborate safely with strong user authentication with SSO and MFA support, device security, and information rights management with vector-based watermarking. You also get seven user-friendly permissioning roles, device trust, and application controls. The Enclave is FIPS 140-2 certified, and even better, every file is encrypted using AES 256-bit encryption at rest and in transit. With this tool you maintain complete, independent control of your encryption keys.
Intelligent data leak prevention and threat detection
The CMMC Enclave Solution helps you protect the flow of information and reduce content-centric risks with precision — without slowing down work. Use classification-based security controls to automatically prevent data loss, and AI-powered, context-aware alerts to detect potential data theft and malicious content. Enable secure hybrid work from anywhere, anytime, and any device with native tools that help secure content at scale.
Simplify your information governance strategy
We make it easy to streamline information governance with flexible retention schedules, preservation for defensible discovery, and disposition management. Get the content lifecycle management your organization needs to reduce risk and stay compliant, while keeping teams productive.
Exceed global compliance requirements
Whether you need to meet specific industry regulations or international privacy standards, the Enclave covers all your data compliance and regulatory needs — including GDPR, GxP Validation, HIPAA, ITAR, PCI DSS, ISMAP, FedRAMP, StateRAMP, and more.
Seamless integrations for better security and compliance
The Enclave’s security and compliance partner ecosystem provides seamless integrations with a select group of best-in-class technology partners. Our partnerships enhance and extend data security and compliance across your existing tool set.