Box Inc.

Offered by Box Inc.

HighFedRAMP AuthorizedAgency
Status
FedRAMP Authorized
Impact Level
High
Authorized Agencies
56
Service Type
PaaS
Authorization date
March 25, 2025
Annual assessment
August 29, 2001
Agency reuse
56

Service description

Box is a FedRAMP High, FedRAMP Moderate and DoD IL4 Authorized secure cloud content management, collaboration, and intelligent automation platform that enables federal agencies and the Department of Defense to securely manage, share, and analyze mission-critical content in the cloud. Built to support the rigorous compliance, security, and operational demands of U.S. federal and defense environments, Box provides a unified content platform where agencies can collaborate in real time, manage the full lifecycle of Controlled Unclassified Information (CUI), automate workflows, and maintain full control over sensitive data—whether in civilian, DoD, or Intelligence Community settings. Box delivers enterprise-grade security with end-to-end encryption, granular access controls, detailed audit trails, and native data governance capabilities—all managed in U.S.-based data centers by U.S. Persons. The platform integrates seamlessly with existing identity providers, zero trust architectures, and endpoint security solutions, supporting CAC/PIV authentication and aligning with NIST 800-53 Rev5, FedRAMP High, and DoD SRG IL4 control baselines. BoxAI, a secure, built-in suite of enterprise-grade artificial intelligence tools, enhances the power of content by enabling federal teams to summarize documents, extract insights, automate repetitive tasks, and make faster, smarter decisions—without compromising compliance. BoxAI operates entirely within the FedRAMP High boundary, ensuring that government data remains private, is never used to train AI models, and is governed according to strict federal standards. Box is committed to supporting agencies as they modernize IT operations, drive digital transformation, and accelerate mission outcomes—securely, intelligently, and at scale. With Box for Government and BoxAI, agencies gain the trusted content layer they need to operate with speed, agility, and confidence in today’s dynamic threat landscape.

Service model

  • PaaS
  • SaaS

Deployment

Public Cloud

Agency authorizations

Administration for Children & FamiliesAgency for Healthcare Research and QualityArgonne National LaboratoryBureau of Engraving and PrintingBureau of Indian EducationCenters for Medicare & Medicaid ServicesConsumer Product Safety CommissionCouncil of the Inspectors General on Integrity and EfficiencyDefense Nuclear Facilities Safety BoardDepartment of EnergyDepartment of Health and Human ServicesDepartment of JusticeDepartment of StateDepartment of Veterans AffairsDepartment of the Interior Office of the Inspector GeneralDepartment of the NavyDepartment of the TreasuryFederal Aviation AdministrationFederal Communications CommissionFederal Maritime CommissionFederal Reserve SystemFederal Retirement Thrift Investment BoardFederal Student AidFermi National Accelerator LaboratoryFirst Responder Network AuthorityFood and Drug AdministrationGovernment National Mortgage AssociationHealth Resources and Services AdministrationImmigration and Customs EnforcementInterior Business CenterInternal Revenue ServiceLibrary of CongressNational Aeronautics and Space AdministrationNational Endowment for the ArtsNational Institute of Standards and TechnologyNational Institutes of HealthNational Nuclear Security Administration / Lawrence Livermore National LaboratoryNational Nuclear Security Administration / Nevada Field OfficeNuclear Regulatory CommissionOffice of Personnel ManagementSavannah River National LabSmall Business AdministrationTennessee Valley AuthorityU.S. Antarctic ProgramU.S. Commission for the Preservation of America's Heritage AbroadUS Fish and Wildlife ServiceUnited States Forest ServiceUnited States International Trade CommissionUniversal Service Administrative Company
Independent assessor (3PAO)
Schellman Compliance, LLC