Box Achieves FedRAMP High Authorization
Box (NYSE:BOX) has achieved FedRAMP High Authorization, enabling U.S. government agencies and contractors to use its Intelligent Content Management platform for highly sensitive data. The certification includes over 421 security controls and extends to Box AI and Box Hubs functionality.
The authorization was granted after a rigorous assessment by the U.S. Department of Veterans Affairs and allows for handling sensitive government data including PII, patient records, financial data, and Controlled Unclassified Information. Box AI, introduced in May 2023, integrates with major language models from Microsoft, AWS, and Google Cloud, offering features like data extraction and Q&A capabilities across various document formats.
Box currently maintains Moderate ATOs with several U.S. government agencies and integrates with other FedRAMP High-compliant platforms such as Salesforce, Microsoft GCC High, ServiceNow, and Okta. The FedRAMP High certification is available to customers on Enterprise Plus and Enterprise Advanced plans.
Box (NYSE:BOX) ha ottenuto l'Autorizzazione FedRAMP High, consentendo alle agenzie governative statunitensi e ai loro appaltatori di utilizzare la sua piattaforma di Gestione Intelligente dei Contenuti per dati altamente sensibili. La certificazione include oltre 421 controlli di sicurezza e si estende alle funzionalità di Box AI e Box Hubs.
L'autorizzazione è stata concessa dopo un rigoroso assessment da parte del Dipartimento degli Affari dei Veterani degli Stati Uniti e consente la gestione di dati sensibili del governo, inclusi PII, registri dei pazienti, dati finanziari e Informazioni Controllate Non Classificate. Box AI, introdotto a maggio 2023, si integra con i principali modelli linguistici di Microsoft, AWS e Google Cloud, offrendo funzionalità come l'estrazione dei dati e capacità di domande e risposte su vari formati di documento.
Attualmente, Box mantiene ATO Moderati con diverse agenzie governative statunitensi e si integra con altre piattaforme conformi a FedRAMP High come Salesforce, Microsoft GCC High, ServiceNow e Okta. La certificazione FedRAMP High è disponibile per i clienti dei piani Enterprise Plus e Enterprise Advanced.
Box (NYSE:BOX) ha logrado la Autorización FedRAMP High, lo que permite a las agencias gubernamentales de EE. UU. y a sus contratistas utilizar su plataforma de Gestión Inteligente de Contenidos para datos altamente sensibles. La certificación incluye más de 421 controles de seguridad y se extiende a las funcionalidades de Box AI y Box Hubs.
La autorización fue concedida tras una rigurosa evaluación por parte del Departamento de Asuntos de Veteranos de EE. UU. y permite el manejo de datos sensibles del gobierno, incluidos PII, registros de pacientes, datos financieros e Información Controlada No Clasificada. Box AI, introducido en mayo de 2023, se integra con los principales modelos de lenguaje de Microsoft, AWS y Google Cloud, ofreciendo características como extracción de datos y capacidades de preguntas y respuestas en varios formatos de documentos.
Actualmente, Box mantiene ATO Moderados con varias agencias gubernamentales de EE. UU. e integra otras plataformas que cumplen con FedRAMP High, como Salesforce, Microsoft GCC High, ServiceNow y Okta. La certificación FedRAMP High está disponible para clientes en los planes Enterprise Plus y Enterprise Advanced.
Box (NYSE:BOX)는 FedRAMP High 인증을 획득하여 미국 정부 기관과 계약자가 고도의 민감한 데이터를 위해 Intelligent Content Management 플랫폼을 사용할 수 있게 되었습니다. 이 인증에는 421개 이상의 보안 통제가 포함되어 있으며 Box AI 및 Box Hubs 기능으로 확장됩니다.
이 인증은 미국 재향군인부의 엄격한 평가 후에 부여되었으며, PII, 환자 기록, 재무 데이터 및 통제된 비공식 정보와 같은 민감한 정부 데이터를 처리할 수 있도록 합니다. 2023년 5월에 도입된 Box AI는 Microsoft, AWS 및 Google Cloud의 주요 언어 모델과 통합되어 다양한 문서 형식에서 데이터 추출 및 Q&A 기능과 같은 기능을 제공합니다.
현재 Box는 여러 미국 정부 기관과 Moderate ATO를 유지하고 있으며 Salesforce, Microsoft GCC High, ServiceNow 및 Okta와 같은 다른 FedRAMP High 준수 플랫폼과 통합됩니다. FedRAMP High 인증은 Enterprise Plus 및 Enterprise Advanced 플랜을 사용하는 고객에게 제공됩니다.
Box (NYSE:BOX) a obtenu l'Autorisation FedRAMP High, permettant aux agences gouvernementales américaines et à leurs contractants d'utiliser sa plateforme de Gestion Intelligente de Contenu pour des données hautement sensibles. La certification comprend plus de 421 contrôles de sécurité et s'étend aux fonctionnalités de Box AI et Box Hubs.
L'autorisation a été accordée après une évaluation rigoureuse par le Département des Anciens Combattants des États-Unis et permet de traiter des données gouvernementales sensibles, y compris des PII, des dossiers de patients, des données financières et des Informations Non Classifiées Contrôlées. Box AI, introduit en mai 2023, s'intègre avec les principaux modèles linguistiques de Microsoft, AWS et Google Cloud, offrant des fonctionnalités telles que l'extraction de données et des capacités de questions-réponses à travers divers formats de documents.
Box maintient actuellement des ATO Modérés avec plusieurs agences gouvernementales américaines et s'intègre avec d'autres plateformes conformes à FedRAMP High telles que Salesforce, Microsoft GCC High, ServiceNow et Okta. La certification FedRAMP High est disponible pour les clients des plans Enterprise Plus et Enterprise Advanced.
Box (NYSE:BOX) hat die FedRAMP High-Autorisierung erreicht, die es US-Regierungsbehörden und Auftragnehmern ermöglicht, seine Plattform für Intelligentes Content-Management für hochsensible Daten zu nutzen. Die Zertifizierung umfasst über 421 Sicherheitskontrollen und erstreckt sich auf die Funktionen von Box AI und Box Hubs.
Die Autorisierung wurde nach einer strengen Bewertung durch das US-Veteranenministerium erteilt und erlaubt den Umgang mit sensiblen Regierungsdaten, einschließlich PII, Patientenakten, Finanzdaten und kontrollierten nicht klassifizierten Informationen. Box AI, das im Mai 2023 eingeführt wurde, integriert sich mit den wichtigsten Sprachmodellen von Microsoft, AWS und Google Cloud und bietet Funktionen wie Datenextraktion und Q&A-Funktionen über verschiedene Dokumentformate hinweg.
Derzeit hält Box Moderate ATOs mit mehreren US-Regierungsbehörden und integriert sich mit anderen FedRAMP High-konformen Plattformen wie Salesforce, Microsoft GCC High, ServiceNow und Okta. Die FedRAMP High-Zertifizierung ist für Kunden der Enterprise Plus- und Enterprise Advanced-Pläne verfügbar.
- Achieved highest federal security certification (FedRAMP High) expanding addressable market in government sector
- Box AI and Box Hubs received FedRAMP High compliance, enabling AI features for sensitive government data
- Integration with major FedRAMP High-compliant platforms enhances market positioning
- Existing relationships with multiple federal agencies demonstrate strong government sector presence
- FedRAMP High features to highest-tier Enterprise Plus and Advanced plans only
Insights
Box's achievement of FedRAMP High Authorization represents a significant competitive advantage in the federal market. This certification—requiring compliance with over 421 security controls—positions Box to serve agencies handling highly sensitive unclassified data including PII, patient records, and law enforcement information.
The strategic importance lies in Box now being able to offer its AI capabilities at this security tier. Government agencies can leverage Box AI for intelligent data extraction from unstructured content, eliminating manual processing while maintaining stringent security protocols. Box Hubs further enhances this value proposition by enabling secure content curation with AI-powered question-answering capabilities across document collections.
This certification complements Box's existing Department of Defense Impact Level 4 Authorization for Controlled Unclassified Information, creating a comprehensive security profile attractive to federal agencies looking to modernize legacy systems. The seamless integration with other FedRAMP High-compliant platforms (Salesforce + Agentforce, Microsoft GCC High, ServiceNow + Now Assist, and Okta) creates an ecosystem advantage for Box within government IT environments.
Particularly noteworthy is Box's existing federal customer base, including the Department of Justice, Department of the Navy, Federal Reserve System, and NASA. These relationships provide an established foundation for upselling the newly certified AI capabilities, which are available on Enterprise Plus and Enterprise Advanced plans.
For the federal market, where security requirements often prevent adoption of cutting-edge technologies, Box now offers AI functionality with compliance assurances that few competitors can match.
Box's FedRAMP High certification significantly enhances its enterprise value proposition by addressing a challenging market segment with substantial purchasing power. The authorization opens reliable revenue channels in the public sector where sales cycles are typically long but contracts tend to be stable and lucrative.
This certification has three strategic dimensions worth highlighting:
- It creates a competitive moat against newer content management platforms that lack extensive security certifications
- It positions Box AI for high-value government workflows that previously relied on manual processes or legacy systems
- It reinforces Box's evolution from simple cloud storage to Intelligent Content Management with AI as a core differentiator
The timing is particularly advantageous as government agencies face increasing pressure to modernize their technology infrastructure while maintaining stringent security standards. Box can now offer these agencies a path to implement AI-powered automation without compromising compliance requirements.
By extending FedRAMP High compliance to Box AI and Box Hubs, the company has effectively bundled its premium offerings with its security credentials. This bundling strategy is clever—it encourages government customers to adopt higher-tier Enterprise Plus and Enterprise Advanced plans to access these security-compliant AI capabilities.
The integration with other FedRAMP High-compliant platforms creates an ecosystem play that increases switching costs once implemented. When combined with Box's existing federal agency relationships, this certification positions the company to capture more public sector market share while upselling AI capabilities to current clients.
Box AI can now be used for government processes involving highly sensitive data
“Achieving FedRAMP High certification involves extensive documentation of our security controls and a rigorous audit to ensure we meet the highest standards for protecting customer data,” said Tom Cowles, Chief Compliance Officer at Box. “Combined with our Department of Defense Impact Level 4 Authorization for Controlled Unclassified Information (CUI), Box empowers government agencies to securely manage their content, deliver AI-enhanced experiences to employees, drive intelligent workflows, and replace outdated, legacy systems — so they can focus on delivering essential services to citizens.”
"At Carahsoft, we pride ourselves on forging strong partnerships that deliver real value to our Government customers,” said Bethany Blackwell, Program Executive for Cloud Solutions at Carahsoft. “Box's achievement of FedRAMP High is a testament to their commitment to security, and we're proud to be their partner in bringing this critical capability to the Public Sector with support from our reseller partners."
Available today: FedRAMP High-compliant AI
Since the unveiling of Box AI in May 2023, the company has been at the forefront of delivering secure and compliant AI. Box has built Box AI to be flexible and to securely integrate today’s most powerful large language models, including Microsoft’s Azure OpenAI Service, AWS Bedrock, Claude via AWS, and Google Cloud’s Vertex AI – with more models to come.
Box AI transforms content management beyond basic summarization. It enables advanced data extraction and Q&A from unstructured formats — including documents, images, spreadsheets, presentations, and more — unlocking insights in seconds. The ability to leverage intelligent data extraction, especially at scale, eliminates the need for manual processing and traditional data processing tools that are expensive and require extensive setup.
Box Hubs helps organizations curate, share, and collaborate on content securely and more effectively. Further, it offers seamless content experiences enhanced with Box AI, where customers can ask questions across all of the documents in a Hub and instantly get highly accurate answers with easy-to-follow citations.
Lastly, Box AI APIs enable developers to deliver AI-powered actions, including data extraction, in custom applications. This powers seamless user experiences in citizen portals and automates processing of content within.
Achieving FedRAMP High authorization
Box achieved FedRAMP High Authorization to Operate (ATO) after undergoing a comprehensive and thorough assessment conducted by the
In addition to this achievement, Box seamlessly integrates with other FedRAMP High-compliant platforms such as Salesforce + Agentforce, Microsoft GCC High, ServiceNow + Now Assist, and Okta. This integration ensures that government agencies can maintain uninterrupted workflows, enabling them to leverage the tools they rely on while staying within the boundaries of secure, compliant environments. By connecting seamlessly with other trusted platforms, Box helps to streamline operations, optimize productivity, and enhance collaboration across government agencies.
“Content security is paramount for federal agencies and with today’s increased threat landscape, it is more critical than ever that vendors meet the highest level of security to keep federal data secure,” said Amy Machado, Senior Research Manager, Enterprise Content and Knowledge Management Strategies, IDC. “With this authorization, Box’s Intelligent Content Management platform can help agencies that handle the government's most sensitive, unclassified data, accelerate business processes, power workplace collaboration, and protect their most valuable information.”
Box currently holds Moderate ATOs with a variety of
Pricing and Availability
FedRAMP High is now available to customers on Enterprise Plus and Enterprise Advanced plans.
To learn more about Box's FedRAMP High authorization and ongoing innovations, visit the Box blog and https://www.box.com/fedramp.
About Box
Box (NYSE:BOX) is the leader in Intelligent Content Management. Our platform enables organizations to fuel collaboration, manage the entire content lifecycle, secure critical content, and transform business workflows with enterprise AI. Founded in 2005, Box simplifies work for leading global organizations, including AstraZeneca, JLL, Morgan Stanley, and Nationwide. Box is headquartered in
View source version on businesswire.com: https://www.businesswire.com/news/home/20250327934042/en/
Investors:
Cynthia Hiponia / Elaine Gaudioso
ir@box.com
Media:
Dani Robin
press@box.com
Source: Box, Inc.
FAQ
What does Box's FedRAMP High Authorization mean for government data security?
Which AI capabilities are included in Box's FedRAMP High certification?
Which government agencies currently use Box's platform?
What integration capabilities does Box offer with other FedRAMP High platforms?
Who can access Box's FedRAMP High certified services?
