Announcing Box Trust

I'm excited to announce Box Trust, an initiative to help our customers successfully embrace a modern security framework as they move information and collaboration to the cloud. Through Box Trust, customers will have the best access to Box's security products, visibility into our various compliance & controls, and a vetted ecosystem of security and governance technology partners. For the first phase of Box Trust, we'd like to share a bit more about how we're working with the security ecosystem — including Symantec, Palo Alto Networks, Splunk, OpenDNS, Skyhigh, Okta, MobileIron, Airwatch by VMware and many others — to provide the most trusted services to our customers, helping them protect and manage their content in the cloud.

The need for Box Trust became clear as we began working with larger, security conscious enterprises, many of which were standardizing on Box across their business. Organizations like GE, Toyota, Eli Lilly, Stanford Medical, DreamWorks and Procter & Gamble have been early movers in enabling content collaboration in the cloud and on mobile devices, but doing so required a thorough evaluation of the security framework supporting this transition. Businesses can't simply move tens of thousands of employees and hundreds of terabytes of data to the cloud and then think about all the security implications later.

In many ways, information is an enterprise's most precious asset. As businesses move from on-premise computing to the cloud, from desktops to mobile devices, and from collaboration between coworkers to sharing with a global network of partners, customers and vendors, that information needs to be able to move between people, devices and applications at unprecedented levels. This tectonic shift has transformed everything about how we work, and it equally inflicts major challenges when it comes to the security and management of enterprise data. Almost no security model or architecture from the days of client/server technology has withstood the test of time.

Indeed, nearly every security service -- identity management, access management, data loss prevention, intrusion detection, security information, event management, and others -- is being rethought and rearchitected for this new paradigm. And because Box is the platform that powers the information that touches every part of an enterprise's business and beyond, our customers often look to us to tell them how what services will help them best secure and protect their data.


In a world that is no longer defined by a corporate perimeter, a new security model is emerging that puts the user at the center of the security design. We've invested significantly in building new security and management capabilities into the Box platform — from Information Rights Management capabilities to Box for Enterprise Mobility Management — and we're also partnering with the best in the industry.

This is what the Box Trust ecosystem is all about. Box Trust Partners -- 19 in total so far including all new partners Symantec, Splunk, Palo Alto Networks, Sumo Logic and OpenDNS -- are all vetted to provide best-in-class interaction with our APIs, support for our customers, and offer value-added capabilities on top of our platform. Our partnership with the security ecosystem is incredibly important to the successful delivery of Box into the enterprise, and our work here is just beginning.

The promise of information that moves freely and securely across entire organizations and between people, devices and applications is massive. But this can only happen with the tight collaboration between IT organizations, security professionals, application vendors, and the security ecosystem. Together, the future is about making security usable, offering enterprises better data and visibility into the use of cloud services, and protecting the unpredictable and near-infinite access that we've come to expect from modern tools. This is just the beginning, but we're excited about unlocking the potential of every organization.