Enhanced threat protection, new adaptive response, agent security, Box Records and Box Automated Archive will help organizations protect enterprise content and manage its lifecycle as AI adoption grows.
Today at BoxWorks 2026, we’re announcing security and governance enhancements to help organizations protect content, control how AI agents use it and manage it throughout its lifecycle.
The announcements span stronger threat detection, adaptive response, security controls for agents, and two new governance capabilities: Box Records and Box Automated Archive.
Because people, applications, and agents work with content in Box, we can connect a broad range of signals, such as content sensitivity, collaboration patterns, agent activity, device posture, and session context, to help teams detect and investigate risk. Point security solutions may see an event. Box connects that event to the content, the actor and the activity around it because it manages the content itself.
The security announcements span three fronts: threat protection, adaptive response, and security controls for agents. Box also announced Box Records and Box Automated Archive to help organizations manage content throughout its lifecycle.
Enhanced threat protection
To help teams spot activity that could expose or destroy content, Box is strengthening detection of unusual downloads, compromised sessions, suspicious sharing, and mass deletion.
- Unusual downloads: Detect unexpected download activity sooner so teams can investigate.
- Account and session protection: Use session binding and device-bound credentials to make stolen sessions harder to reuse.
- Suspicious sharing and mass deletion: Surface activity that could expose or destroy content.
“As agents become more capable and the threat landscape grows more complex, organizations need to advance security alongside innovation. Box is helping them do both by protecting enterprise content and giving organizations the confidence to explore what’s possible with AI”
Adaptive response
Different threats call for different responses. Box adaptive response matches actions to risk, from limiting downloads to ending a session.
- Stronger verification: Request an additional identity check when risk increases.
- Download restrictions: Limit downloads while allowing approved viewing.
- Session termination: End a session when risk is severe to help contain further activity.
Set boundaries for AI agents
As agents access enterprise content, enterprises need control over what they can access and do. Box Agent Security provides controls for both.
Box Agent Security brings together four capabilities to help administrators establish those boundaries:
- Control access to sensitive content. Classification-based policies apply content rules before an agent accesses a file, helping organizations restrict access to information the agent does not need.
- Constrain agent actions. MCP Guardrails let administrators set boundaries on selected write tools used through the Box MCP Server, including actions that upload, move, copy or share content. Box checks requests against those rules before running the action.
- Surface downloads that exceed defined limits. Customer-defined thresholds alert teams when download counts or data volumes cross a configured limit, helping them identify potentially harmful behaviour and investigate.
- Agent session governance and audit trails show admins which agent acted, what content it accessed, and what output it generated
Together, these capabilities will help administrators establish boundaries for agent activity and give security teams information to investigate what happened.
Manage official records where they already live
Organizations must identify which documents are official records, apply the appropriate retention rules and manage their eventual disposition.
We’re introducing Box Records to help organizations do this within Box.
Administrators will be able to define record types and retention rules, automate record declaration through workflows, and see which records are under retention or approaching disposition.
This will help records, compliance, and legal teams maintain oversight while reducing the manual work required of employees. Existing permissions, policies, and auditability will remain connected to the content, without requiring a separate records repository.
Automate archiving around business events
We’re also introducing Box Automated Archive, a new capability powered by Box Automate.
Administrators will be able to define archiving rules based on business events, such as a project being marked complete. When the specified conditions are met, archiving will happen automatically.
That will give teams a more consistent way to manage content as active work ends, helping keep workspaces organized and reducing manual administration.
Box Records will support the management of official records, retention and disposition. Automated Archive will carry out archiving rules when the relevant business conditions are met.
Connect protection with lifecycle management
For a team completing a client project, these capabilities address responsibilities throughout the work.
Agent access policies and guardrails can establish which content an agent may use and which actions it may take. Threshold alerts can surface download activity that needs investigation. Records management can help the organization retain final agreements under the appropriate rules, while an archiving workflow can respond when the project closes.
The aim is to give administrators control over content during active work and a consistent way to manage it afterwards.
“As agents become more capable and the threat landscape grows more complex, organizations need to advance security alongside innovation. Box is helping them do both by protecting enterprise content and giving organizations the confidence to explore what’s possible with AI,” said Aaron Levie, co-founder and CEO of Box.
Availability
The new threat protection capabilities are planned for early 2027 for Enterprise Advanced and Shield customers. Box Records and Box Automated Archive are planned for Enterprise Advanced. The current roadmap targets a Q4 beta for Box Records and a Q4 release for Automated Archive.
Classification-based access policies, MCP Guardrails, and threshold alerts are generally available. Agent session governance and audit trails are planned for Q4.
