Box review and score
Enterprise content cloud with strong compliance and integrations, but no deal Q&A or redaction.
Box brings HIPAA, ISO 27001, SSO, an API and AI features to the table, and many companies already use it. It ranks No. 9 of 18 because it is a general content platform without a Q&A module, redaction or per-document rights control.
Profile re-checked October 2026. Sources: the vendor's own docs, its price page and its security certificates. Method: how we rank.
The case for Box is often simple: your company already pays for it. A US company since 2005, Box is a content cloud first, tagged in our facts as general-purpose and built around collaboration and integrations. For an internal team that wants to share a set of documents with an adviser, using the platform IT already approved can save weeks of procurement.
On paper the checklist is broad. Box ticks nine of the twelve items, including e-signature, a mobile app, a public API, single sign-on, two-factor login, bulk upload and AI features. Its certifications list is the longest on our roster, with SOC 2, ISO 27001, GDPR and HIPAA. Data protection is solid, and pricing is published per user with a free trial, which helps Cost predictability.
The missing three items are the ones a deal room exists for. Our facts list no Q&A module, no redaction and no document rights control of the view, print and download kind. That holds the Diligence toolkit mark well below the dedicated rooms, and Deal support is modest because the support model is built for general business use. Box scores 81 overall; it rises on lists that value integrations and falls on M&A-specific ones.
Score profile
Box: score profile
Where Box places across our top lists
Ranked just above: SmartRoom (81). Ranked just below: Citrix ShareFile (80).
Strengths and gaps
Where it scores well
- SOC 2, ISO 27001, GDPR and HIPAA listed, the longest certification list on our roster.
- SSO, public API, mobile app and AI features for integration with company systems.
- Published per-user pricing and a free trial.
Where it slips
- No Q&A module, redaction or document rights control in our facts.
- Per-user pricing grows with every outside reviewer you add.
A good fit for
- Companies already standardised on Box for internal content.
- Ongoing document sharing with advisers, auditors or partners.
- Healthcare-adjacent teams that need HIPAA listed.
Look elsewhere if
- You are running a sale process with bidder Q&A.
- You need to block printing and downloading per document.
Feature checklist
Twelve items, checked against the shared provider facts file. A dash marks an item that Box's documentation does not show; ask about tiers and add-ons before ruling it out.
Running the deal
- Buyer Q&A (absent)
- Bulk folder upload (present)
- E-signature (present)
- AI features (present)
Controlling documents
- Dynamic watermarking (present)
- Document rights (view, print, download) (absent)
- Redaction (absent)
- Audit trail (present)
Access and IT fit
- Two-step login (present)
- Single sign-on (present)
- Public API (present)
- Native mobile app (present)
Pricing and security
Pricing
Box starts at $15 per user per month, with a free trial to test it first. Per-user pricing adds up when many outside parties need access, so model the total before you choose; figures are indicative.
Security
Box lists SOC 2, ISO 27001, GDPR and HIPAA, with single sign-on, two-factor login, dynamic watermarks and an audit trail. Redaction and per-document rights control are missing from our facts file.
| Overall score | 81/100 (Strong) |
|---|---|
| Leaderboard rank | 9 of 18 |
| Entry price | $15 per user/mo |
| Trial | Free trial offered |
| Attestations | SOC 2, ISO 27001, HIPAA, GDPR |
| Deployment | Cloud |
| Founded | 2005 |
| Head office | United States |
| Hosting regions | Ask the vendor |
All prices are USD and indicative, so check them with the vendor. We do not verify where each room hosts data.
Box alternatives
Direct matchups: Box vs Citrix ShareFile, Box vs Ellty, Box vs Onehub
Questions buyers ask about Box
Can Box be used as a virtual data room?
For simple sharing, yes. For a full diligence process it lacks a Q&A module, redaction and per-document view, print and download control, which is why it scores below dedicated rooms on our toolkit criterion.
How much does Box cost?
Box starts at $15 per user per month, with a free trial to test it first. Prices move, so check the vendor site before you budget.
Is Box HIPAA compliant?
HIPAA is listed in our facts, along with SOC 2, ISO 27001 and GDPR. Check the terms that apply to your plan.