Last Updated: February 21, 2024

To support Box, Inc. (“Box” or “we”), in delivering the Box Service, we may engage third party service providers (“Subprocessors”) to assist with its data processing activities. Subprocessors and Box’s affiliates and subsidiaries (“Box Group Companies”) may process, store or otherwise access certain customer information or personal data found in customer Content in order to support and/or improve the Box Service. Unless otherwise specified, capitalized terms that are used on this page have the meaning set forth in the Box Terms of Service or in a superseding written agreement between Box and a particular Box customer. This information is provided in compliance with Box's General Data Protection Regulation (GDPR) obligations as a Processor, pursuant to its Processor Binding Corporate Rules Policy and other applicable legal and/or contractual obligations.

Before engaging any Subprocessor, we perform due diligence of such Subprocessor's privacy, information security, and data protection practices. We enter into written agreements with Subprocessors that enforce compliance with applicable data protection laws, security controls, confidentiality and international data transfer requirements. We also restrict Subprocessor access to only what is necessary to maintain and provide the Box Service to our customers.  Subprocessors are strictly prohibited from using customer data, Content or personal data for any purpose other than to support Box in providing the Service to its customers.

The following table identifies the Subprocessors used by Box, the type of services that may be provided, and the location where such subprocessing activities are performed.

*And other regions if selected by the respective customer

As our business and technical requirements change, we may from time to time remove or add Subprocessors, or we may engage an existing Subprocessor to perform additional services for us, if we believe that doing so will enhance our ability to deliver the Box Service. We will periodically update this page to reflect changes to our Subprocessors. If you wish to receive notifications of updates to this Box Subprocessors Page, please click here. If you have any questions about our subprocessing activities, please contact privacy@box.com.

The following entities are members of Box Group Companies: