BoxWorks 2026: Box brings frontier AI to business workflows, with enterprise context and control

|
Share

At BoxWorks ‘26, Aaron Levie will share the stage with NVIDIA to discuss the vast changes that AI is bringing to the enterprise. Frontier AI is moving from answering questions to planning complex work, coordinating specialized agents and improving how tasks get done. 

That opens up the possibility of redesigning entire business processes around a goal.

The real opportunity with AI is not just helping individuals work faster, but rethinking how entire business processes get done.

Aaron Levie, Box co-founder and CEO

To realize that potential, even the most capable models need to understand what makes your business unique. AI needs context — the unique insights that live in strategy decks, product designs, meeting notes, and the rest of the unstructured data that your employees, partners, and customers create every day — to turn general intelligence into decisions and actions grounded in your business.

Until now, this knowledge — every company’s who, what, where, when, and why — has lived in unstructured formats stored in fragmented silos, leaving agents all too likely to access the wrong content, deliver poor results, and even leak sensitive data. To make the most of this new technology, enterprises need one unified platform that can connect their proprietary knowledge with the latest AI tools — accurately, efficiently, and above all securely.

That’s what we’re building with Intelligent Content Management at Box: a secure, open content platform that connects your company’s knowledge to the AI models, agents and applications you choose. Your teams can put that knowledge to work across their tech stack, with Box providing the governed content foundation.

When an AI agent reads a contract, extracts data from a proposal, or answers a question grounded in your company's data, it's doing so through Box, with your existing permissions and governance controls maintained, designed to support your organization's compliance requirements.

Today at BoxWorks 2026, we’re introducing new ways to put frontier AI to work across your business:

  • Create workflows with AI, grounded in your business knowledge.
  • Connect your tech stack through a secure, open content platform.
  • Protect your most important content while giving agents the context they need.

Here’s how today’s announcements bring those three capabilities together.

Coming soon: Box Context Retrieval helps you surface crucial knowledge from company content 

Enterprise information is growing and changing. People and agents alike need to be able to find the information that’s relevant to their task. 

But an agent needs the right information for the task it’s given: relevant, up to date and within its access permissions. An outdated contract or missing policy can send an entire workflow in the wrong direction. 

So we’re excited to introduce Box Context Retrieval, an augmented  search capability coming soon that helps AI tools and agents find relevant company knowledge in Box — quickly, accurately, and while honoring existing access permissions. 

Box Context Retrieval combines precise keyword matching with semantic search that understands meaning and context to help agents and AI applications search files for the passages that contain the context they need for specific tasks. 

This capability is made possible by our expanded collaboration with NVIDIA, whose Nemotron Retriever embedding models enable Context Retrieval to capture the meaning of content and retrieve information relevant to a request.

For AI agents, that means leveraging the most relevant business context. For developers, it means being able to focus on building great applications, instead of maintaining separate retrieval pipelines. 

We’re also bringing NVIDIA Nemotron open weight models to Box AI, expanding customers’ choices for generative AI workflows. 

Describe your goal. Box Architect designs and builds the workflow.

We’re also introducing Box Architect, an AI partner that brings the reasoning capabilities of frontier AI models together with the content and procedures already in Box to design workflows, assemble the tools to run them and recommend improvements over time.

A business process owner might know the outcome they want: onboard a client with complete documentation, review a contract against company requirements, route an insurance claim to the right decision-maker. But designing every step, exception and handoff that goes into making this workflow happen takes a different kind of expertise.

Now you’ll be able to just describe the process you’re after, and rather than reproducing the process the team runs today, Box Architect will use its knowledge of your company and understanding of what frontier models now make possible to rethink and redesign the workflow from the ground up for optimal results. 

Then it will gather the agents to build the necessary components — a client onboarding workflow, for instance, might require an intake form, document analysis, routing rules, approvals, and a dashboard — and deliver everything that’s needed to drive success.

With Box Architect, teams will be able to solve previously difficult or tedious roadblocks by describing what they want to accomplish and having Box Architect build the workflows that bring together agents, people, and content to solve the problem.

Teams retain the ability to review, test, and refine the new workflow before deployment, and existing Box permissions and governance stay in place as well. And after launch, Architect will suggest targeted performance updates that can be accepted or refined using simple conversational prompts.

The bottom line: Box Architect closes the gap between business strategy and automated execution, and delivers workflows that launch faster, work better, and continuously adapt and improve as your organization evolves.

New security features to control what agents can access and do

As AI agents take on more work with sensitive business content, enterprises need to know what information those agents can access, what they’re doing with it, and when to intervene. 

Because Box manages the content itself, it can connect signals about its sensitivity with who is accessing it, how it is being shared and what an agent is doing with it. That gives security teams context to investigate risk and helps organizations put AI to work with greater control. Today’s announcements strengthen that foundation through threat protection, adaptive response and controls for agent access and actions.

Threat protection

The adoption of AI and agents makes it essential for enterprises to amplify the protection of their important business content. That’s why Box is accelerating unusual-download detection, strengthening defenses against account takeover and session hijacking, and expanding anomaly detection to suspicious sharing and mass deletion.

Adaptive response

Detecting a threat is only part of the job; the response also needs to match the level of risk. Adaptive response can prompt for stronger verification, limit downloads while allowing approved viewing, or end a session when risk is severe. That helps teams respond proportionately, instead of treating every event the same way.

Agent security

As more agents access and act on your content, we’re announcing these new Box Agent Security features help protect it:

  • Control access: Now you can apply classification-based policies before external agents reach sensitive files.
    Set action boundaries: Protect content by using MCP Guardrails to control which tools external agents are able to work with and which actions they’re allowed to take.
    Alert on thresholds: Notify customers when certain user, app and agent activity exceeds the limits that they’ve set.
    Track agent activity: Maintain long-term visibility with session governance and audit trails that show which agent acted and what it did.

Together, these controls help you protect your sensitive content, keep agent activity within your set policies, and give teams visibility to respond promptly to any issues that arise.

Work with files directly in agent sandboxes

Your choice of AI tools will keep evolving. Box provides a common content foundation across those tools, connecting agents to the business knowledge they need while keeping permissions and governance tied to the content. 

Coming soon, Box Mount will make that connection easier, letting agents work directly with Box folders inside isolated computing environments, often called sandboxes.

Today, connecting agents to enterprise content often means building custom pipelines to download files, move them into a sandbox, and upload the results. Developers also have to keep permissions, version history, and audit trails intact throughout the process.

Box Mount will simplify that work by making Box folders available directly inside the agent’s coding environment. Agents will be able to read, edit, and create files using familiar file and shell commands, with support for syncing changes back to Box and refreshing content from Box. Existing permissions, security classifications, and access controls on source content in Box will be respected.

Box Mount will also work with NVIDIA OpenShell, a secure runtime that governs agents as they work and access enterprise resources. With DigitalOcean, Box Mount will connect Box folders to Managed Agents sessions, while Cuttlefish’s iPhone app will let people follow the work, approve or deny tool calls, and steer or stop a run from anywhere.

With Box Mount, teams can spend less time moving files and more time putting agents to work — with Box controls in place.

Tailor the Box platform to your industry

Every industry runs on content, but every industry has its own workflows, regulatory requirements, and business systems. When those pieces don’t connect, teams spend way too much time moving documents between tools, reentering information, and chasing approvals. 

So we’re pleased to announce Box for Industries, a new portfolio of industry-specific solutions that brings together Box workflows, compliance support, and integrations to help you use AI and automation in the processes you depend on every day. 

We’re starting with banking, public sector, and media and entertainment:

  • Box for Banking brings secure digital vaults together with Box AI to collect client documents, extract key details and flag missing requirements, helping teams move onboarding forward while maintaining control over sensitive information.
  • Box for Public Sector helps agencies manage case files, public records requests, and other such content through governed workflows, with support for the security and compliance requirements of government work.
  • Box for Media & Entertainment helps organizations streamline talent agreements, rights management, and more, keeping creative assets connected to the approvals and business processes around them.

Integrations with tools like Salesforce, ServiceNow, and Workday connect these workflows to the systems your teams already use. The portfolio provides governance capabilities designed to support your organization’s compliance programs and third-party integrations. And because these solutions build on the Box platform, you can address industry-specific needs while managing your content, AI, and governance together.

Every industry runs on content, but no two industries work in exactly the same way. As AI transforms how organizations work with their content, we need to keep expanding what’s possible for customers across every industry.

Olivia Nottebohm, Chief Operating Officer at Box

“Every industry runs on content, but no two industries work in exactly the same way,” says Olivia Nottebohm, Chief Operating Officer at Box. “As AI transforms how organizations work with their content, we see an enormous opportunity to keep expanding what’s possible for customers across every industry.”

More from BoxWorks 

Planned Box Extractenhancements will help teams measure extraction accuracy, optimize cost and accuracy, route uncertain results for human review, and select models for different extraction tasks.

Box Records will help administrators define record types and retention rules, automate record declaration, and see what’s under retention or approaching disposition — all within Box.

Box Automated Archive, powered by Box Automate, will let administrators automatically archive content when defined business events occur, such as a project being marked closed.

Put your business knowledge to work

Your business context lives in contracts, plans, policies, and countless other files. 

The opportunity is to turn your company’s knowledge into a foundation for how work gets done. Today’s announcements advance that goal: helping you create workflows with AI, connect the models and applications you choose, and protect the content they depend on.

Missed BoxWorks?

No problem — you can sign up here for BoxWorks Virtual on December 10th, and catch up on all the presentations. 

Box Blog Image