Box review
Content cloud with strong security and integrations, but no deal Q&A module.
Key facts
- Software type
- File-sharing platform
- Company
- Founded 2005, based in United States
- Hosting model
- Cloud
- Pricing model
- Per user
- Starting price
- $15 per user a month
- Try before buying
- Free trial available
- Security reports
- SOC 2, ISO 27001, HIPAA, GDPR
- Features listed
- 9 of 12 tracked, 3 of 6 deal controls
- Vendor positioning
- content cloud, collaboration, general purpose, integrations
Overview
Box is a general content cloud founded in 2005 in the United States, not a dedicated data room. It lists strong security credentials (SOC 2, ISO 27001, GDPR and HIPAA) and the full integrations set: single sign-on, a public API, e-signature and a native mobile app, plus AI tools.
What it lacks for deals is the diligence layer. Our facts file shows no Q&A module, so buyer questions would run outside the platform. Pricing is published from $15 per user a month.
Typical buyer: Companies that already run Box and need secure sharing with a single partner, rather than a multi-bidder process.
How Box scores
A fit score of 8.1 puts Box at rank 5 of 18. It scores above the directory average on security controls, admin and guest experience, pricing transparency, ai and automation, integrations and it fit, and below it on deal workflow coverage. Weights come from the scoring methodology.
Box: score by criterion
Deal workflow
Box lists 3 of the six deal controls we track. No Q&A module is listed, so buyer questions would be handled outside the software.
- Q&A workflow
- Not listed Buyers post questions inside the room; the seller routes, answers and publishes them with a full record. (13 of 18 platforms list it.)
- Activity log
- Listed A log of who opened, downloaded or printed which file and when, exportable for the deal record. (18 of 18 platforms list it.)
- Viewer watermarks
- Listed Each page carries the viewer name, email or time, so a leaked copy points back to its source. (18 of 18 platforms list it.)
- In-app redaction
- Not listed Black out personal data or privileged passages inside the room instead of re-uploading edited files. (7 of 18 platforms list it.)
- File-level access rights
- Not listed Per-file control over view, print and download, sometimes with view-only or expiring access. (15 of 18 platforms list it.)
- Bulk import
- Listed Drag whole folder trees into the room with structure and numbering kept. (17 of 18 platforms list it.)
Security and compliance
Box lists SOC 2, ISO 27001, HIPAA, GDPR. ISO 27001 certification is listed. Security controls score 9.2 against a directory average of 8.6.
- Viewer watermarks
- Listed Each page carries the viewer name, email or time, so a leaked copy points back to its source.
- File-level access rights
- Not listed Per-file control over view, print and download, sometimes with view-only or expiring access.
- In-app redaction
- Not listed Black out personal data or privileged passages inside the room instead of re-uploading edited files.
- 2-step verification
- Listed A second login step (code or app) for admins and guests.
Request the current SOC 2 report or ISO certificate under NDA and read the scope and exceptions sections. Data residency and sub-processors are not in our facts file; ask the vendor.
Integrations, mobile and AI
Integrations and IT fit scores 10.0; AI and automation scores 9.0. AI features are listed for Box; confirm which plan includes them and where documents are processed.
- SSO sign-in
- Listed Staff log in with company credentials through an identity provider (SAML or OpenID Connect).
- Developer API
- Listed A documented interface for creating rooms, syncing users and pulling activity into your own systems.
- Built-in e-signing
- Listed Sign NDAs, consents or closing documents without leaving the platform.
- iOS or Android app
- Listed A native iOS or Android app, beyond the mobile browser view most rooms offer.
- AI assistance
- Listed Machine assistance listed by the vendor, such as auto-indexing, summaries, document search or Q&A help.
Pros and cons
Pros
- Top integrations score: SSO, API, e-signature and mobile app.
- SOC 2, ISO 27001, GDPR and HIPAA listed.
- Published per-user price and a free trial.
Cons and gaps to check
- No Q&A module listed.
- No redaction listed.
- Per-user pricing grows with every adviser and guest you add.
Setup and administration
Fast if the company already uses Box; a deal space is a folder with external sharing rules rather than a purpose-built room.
A short checklist for the trial room or the demo call, ideally using a folder of your real files:
- Decide how buyer questions will be tracked without a Q&A module.
- Check external user limits and costs on your plan.
- Review watermarking and download settings per folder.
- Add a coworker to a test guest group and have them report back exactly which folders appear.
- Pull the activity export and look for per-person entries for opening, downloading and printing.
For the full process, see the data room setup guide.
Box pricing
Box charges per user, so the bill depends on how many people on your side need a seat. The table assumes five paid users. All figures are indicative USD; confirm with the provider.
| Room size | Scope | A month | Six months | Basis |
|---|---|---|---|---|
| Focused room | One counterparty, a few thousand pages, light Q&A | $75 | $450 | Five users |
| Competitive process | Three to ten bidders, structured Q&A, staged access | $75 | $450 | Five users |
| Large or cross-border | Many bidders, heavy Q&A, translation, long term | $75 | $450 | Five users |
Box: six months plus a two-month overrun
Estimate your own room
Compare all 18 platforms in the pricing guide and calculator.
Where Box ranks by solution
Each solution page re-weights the six criteria for one kind of work. Positions out of 18.
Box: score and position on each solution page
- Data room software for fundraising (position 4)
- Data room software for law firms (position 5)
- Data room software for board communications (position 2)
Box alternatives
The closest platforms by positioning, type and score.
| Platform | Type | Fit score | Entry | Lists that Box does not | |
|---|---|---|---|---|---|
 DealRoom | Virtual data room | 7.1 | Quote | Q&A workflow, File-level access rights | Profile |
 Citrix ShareFile | File-sharing platform | 7.6 | $55/mo | File-level access rights | Profile |
 Ansarada | Virtual data room | 8.2 | Quote | Q&A workflow, File-level access rights | Profile |
 Drooms | Virtual data room | 7.9 | Quote | Q&A workflow, In-app redaction, File-level access rights | Profile |
Ellty vs Box (deal room versus content cloud)- Box vs
Onehub (two file-sharing platforms used as data rooms)
Summary. Companies that already run Box and need secure sharing with a single partner, rather than a multi-bidder process.
Visit BoxBox: common questions
Can Box be used as a virtual data room?
For simple sharing, yes. It has strong security and integrations, but no Q&A module is listed, so competitive M&A processes usually need a dedicated room.
How much does Box cost?
Box publishes pricing from $15 per user a month. Larger rooms or more users cost more. Prices are indicative; confirm with the provider.
Does Box have AI features?
Yes. Our facts file lists AI features for Box. Its AI and automation score is 9.0 out of 10.
What security certifications does Box have?
Box lists SOC 2, ISO 27001, HIPAA, GDPR, and two-factor login is listed as a feature. Request the current report or certificate and read its scope section.
Can Box run a multi-bidder process?
No Q&A module is listed for Box in our facts file, so buyer questions in a multi-bidder process would need to be tracked elsewhere.