SaaS Ranking

Box

What Box publishes, measured on their own site. Every result below links the page we found it on, or lists the addresses we checked.

Not ranked: not enough data. We could measure 5 of 10 criteria for Box, which is below our threshold. That is a statement about our measurement, not about Box.

Vendor site: box.com · category: Cloud storage

–

Data processing agreement

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 8 addresses we checked
  1. https://box.com/legal/dpa – blocked or unavailable (HTTP 403)
  2. https://box.com/dpa – blocked or unavailable (HTTP 403)
  3. https://box.com/legal/data-processing-agreement – blocked or unavailable (HTTP 403)
  4. https://box.com/data-processing-agreement – blocked or unavailable (HTTP 403)
  5. https://box.com/legal/data-processing-addendum – blocked or unavailable (HTTP 403)
  6. https://box.com/legal/gdpr – blocked or unavailable (HTTP 403)
  7. https://box.com/trust/dpa – blocked or unavailable (HTTP 403)
  8. https://box.com/privacy/dpa – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Subprocessor list

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 7 addresses we checked
  1. https://box.com/legal/subprocessors – blocked or unavailable (HTTP 403)
  2. https://box.com/subprocessors – blocked or unavailable (HTTP 403)
  3. https://box.com/sub-processors – blocked or unavailable (HTTP 403)
  4. https://box.com/legal/sub-processors – blocked or unavailable (HTTP 403)
  5. https://box.com/trust/subprocessors – blocked or unavailable (HTTP 403)
  6. https://box.com/privacy/subprocessors – blocked or unavailable (HTTP 403)
  7. https://box.com/legal/subprocessor-list – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

–

Data location stated

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 7 addresses we checked
  1. https://box.com/security – blocked or unavailable (HTTP 403)
  2. https://box.com/trust – blocked or unavailable (HTTP 403)
  3. https://box.com/legal/privacy – blocked or unavailable (HTTP 403)
  4. https://box.com/privacy – blocked or unavailable (HTTP 403)
  5. https://box.com/privacy-policy – blocked or unavailable (HTTP 403)
  6. https://box.com/compliance – blocked or unavailable (HTTP 403)
  7. https://box.com/legal/privacy-policy – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

✓

Status page with history

A public status page with incident history.

Source: https://status.box.com/ · checked 2026-08-31

–

Public pricing

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 5 addresses we checked
  1. https://box.com/pricing – blocked or unavailable (HTTP 403)
  2. https://box.com/pricing/ – blocked or unavailable (HTTP 403)
  3. https://box.com/plans – blocked or unavailable (HTTP 403)
  4. https://box.com/en/pricing – blocked or unavailable (HTTP 403)
  5. https://box.com/pricing-plans – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

✗

Certifications named

We found this behind a sign-in, so it is not published openly.

Seen at https://trust.account.box.com/login · checked 2026-08-31

Show the 6 addresses we checked
  1. https://box.com/security – blocked or unavailable (HTTP 403)
  2. https://box.com/trust – blocked or unavailable (HTTP 403)
  3. https://box.com/trust-center – blocked or unavailable (HTTP 403)
  4. https://box.com/compliance – blocked or unavailable (HTTP 403)
  5. https://box.com/legal/security – blocked or unavailable (HTTP 403)
  6. https://trust.box.com/ – found, but behind a sign-in

Is this wrong? Send us the URL

–

Uptime SLA with a figure

Not measured. The vendor’s server blocked or rate-limited our crawler, so this was not measured.

Show the 6 addresses we checked
  1. https://box.com/legal/sla – blocked or unavailable (HTTP 403)
  2. https://box.com/sla – blocked or unavailable (HTTP 403)
  3. https://box.com/legal/service-level-agreement – blocked or unavailable (HTTP 403)
  4. https://box.com/trust/sla – blocked or unavailable (HTTP 403)
  5. https://box.com/uptime – blocked or unavailable (HTTP 403)
  6. https://box.com/legal/uptime-sla – blocked or unavailable (HTTP 403)

Is this wrong? Send us the URL

✓

HTTPS enforced with HSTS

HTTP redirects to HTTPS and the HSTS header is set.

Source: https://box.com/ · checked 2026-08-31

✗

No third-party tracking before consent

No consent-free first load found.

Checked 1 address on 2026-08-31.

Show the 1 address we checked
  1. https://box.com/ – third-party requests before any interaction: 107-coj-713.mktoresp.com, api.segment.io, app.qualified.com, assets.adobedtm.com, b.6sc.co, bam.nr-data.net, box.demdex.net, boxinc.tt.omtrdc.net, c.6sc.co, cdn.segment.com, cdn03.boxcdn.net, cm.everesttech.net, consent.trustarc.com, dpm.demdex.net, epsilon.6sense.com, ipv6.6sc.co, j.6sc.co, js-agent.newrelic.com, munchkin.marketo.net, secure.adnxs.com, segment-box.com, www.googletagmanager.com

Is this wrong? Send us the URL

✗

security.txt (RFC 9116)

No security.txt found.

Checked 1 address on 2026-08-31.

Show the 1 address we checked
  1. https://box.com/.well-known/security.txt – reached, no match (HTTP 404)

Is this wrong? Send us the URL