Box achieves FedRAMP High Authorization

Federal agencies face unique and extraordinary challenges. They’re tasked with modernizing legacy IT,  improving government efficiency and cutting costs - all while defending critical data from cyberattacks, meeting stringent compliance requirements, and navigating a rapidly changing workforce. This is no easy task. As agency work expands across various geographic and organizational boundaries, the challenges of security and compliance become even more significant. Teams and employees now need to access sensitive information from remote locations. To help with these challenges, we’re excited to share that Box has received FedRAMP High Authorization. This authorization, which includes over 421 security controls, gives U.S.government agencies and authorized government contractors the ability to leverage Box's Intelligent Content Management platform for highly sensitive data.

The robust security standards Box meets for FedRAMP allows customers to also use Box for many high-value use cases such as criminal justice investigation, healthcare, taxes, and law enforcement use cases like the FBI's Criminal Justice Information Services (CJIS) standard and the IRS' Publication 1075 (IRS 1075). 

FedRAMP High-compliant AI 

Government agencies deal with a plethora of use cases, yet accomplishing their mission fundamentally rests on employees being able to work productively and collaborate securely with other federal and state agencies, industry, academia, and nonprofits. It goes without saying that they need to do so while continuing to meet regulatory and compliance requirements. With Box AI and Box Hubs now being FedRAMP High-compliant, this empowers federal agencies with the ability to leverage today’s most powerful AI to drive insight-driven decision-making, gather intelligence from their content and automate workflows. 

Box AI revolutionizes content management by enabling intelligent data extraction and performing Q&A across a wide range of unstructured formats, including documents, scanned files, images, spreadsheets, and presentations, unlocking massive insight in seconds. Intelligent data extraction, especially at scale, eliminates the need for manual processing and traditional IDP/OCR tools that are expensive and require extensive setup.

Box Hubs helps organizations curate, share, and collaborate on content securely and more effectively. Further, it offers seamless content experiences enhanced with Box AI, where customers can ask questions across all of the documents in a Hub and instantly get highly accurate answers with easy-to-follow citations.

For government agencies seeking to harness the power of the best Large Language Models (LLMs) available, Box AI offers a secure, flexible and FedRAMP-compliant solution to accelerate mission-critical work.

Box Sign: FedRAMP High and DoD IL compliant 

In February, we released a CAC/PIV integration for Box Sign, our native electronic signature capability. This provides U.S. Federal Government customers and authorized government contractors with the ability to authenticate electronic signatures by requiring signers to use the credentials that reside on their common access cards (CAC) or personal identity verification cards (PIV). With Box Sign's CAC/PIV integration and DoD IL-4 compliance, U.S. Federal Government organizations can enable and require signers to authenticate themselves using their CAC or PIV smart cards for digital signatures. This enables agencies to consolidate costs and significantly cut their spend on stand-alone e-signature tools.

Further, once the new workflow automation capabilities we released earlier this year (Forms, Doc Gen etc.) go through our annual FedRAMP audit later this year, Box will deliver the entire document generation, e-signature, and document retention lifecycle to Federal customers at FedRAMP High level.

More product innovation primed for Federal adoption

Box prides itself on continuous innovation and increasing value to our customers. This spring, we released several powerful new capabilities in our Enterprise Advanced plan that are expected to go through our annual FedRAMP audit this summer. 

• Box Forms and Box Doc Gen empower users to seamlessly collect data with web and mobile forms, and dynamically generate custom documents - enabling end-to-end content workflows on Box. 
• Box Apps enable teams to create intelligent no-code applications to manage business processes like onboarding, contract management, and more. These purpose-built apps offer custom dashboards, metadata views, and integrated content workflows. 
• Box AI Studio enables companies to create and deploy custom AI agents choosing from a variety of trusted AI models configured for their specific use case needs. 
• Box Archive enables long-term content preservation streamlining compliance and enabling end-to-end content lifecycle management.

One secure, intelligent tech stack

Box achieved FedRAMP High Authorization to Operate (ATO) after undergoing a comprehensive and thorough assessment conducted by the U.S. Department of Veterans Affairs, following FedRAMP’s rigorous security assessment process. This extensive review ensures that Box meets the stringent security and compliance requirements necessary for handling sensitive government data including Personal Identifiable Information (PII), sensitive patient records, financial data, law enforcement data, and other Controlled Unclassified Information. This authorization reinforces Box’s commitment to delivering the highest level of security for its customers.

Additionally, Box seamlessly integrates with other FedRAMP High-compliant platforms such as Salesforce + Agentforce, Microsoft Office GCC High, Okta and ServiceNow + Now Assist. These ongoing partnerships ensure that government agencies can maintain uninterrupted workflows, enabling them to leverage the tools they rely on while staying within the boundaries of secure, compliant environments. By connecting seamlessly with other trusted platforms, Box helps to streamline operations, optimize productivity, and enhance collaboration across government agencies.

FedRAMP High is now available to customers on Enterprise Plus and Enterprise Advanced plans. To learn more about Box's FedRAMP High authorization and ongoing innovations, visit https://www.box.com/fedramp and register for the Content + AI Summit on May 15, 2025.