Policies tagged "box"

box · egress

Box: Redact PII from File Content on Egress

Scans the responses of Box content-returning tools and rewrites personally identifiable information to fixed redaction tokens before the response reaches the…

box redact-pii pii phi dlp redaction egress soc2 hipaa gdpr-ccpa

box · ingress

Box: Role-Gated Writes (Read-Only Default)

Makes Box read-only by default on the MCP path.

box role-gate-writes access-control least-privilege ingress soc2 gdpr-ccpa

box · ingress

Fence Sensitive Box Folders by IdP Group

Fences pinned sensitive Box subtrees (HR, Finance, Legal, …) by ID.

box fence-sensitive-scopes ingress soc2 hipaa gdpr-ccpa

box · ingress

Freeze Destructive Box Operations

Freezes deletes and retention tampering on the community self-hosted Box MCP server (box-community/mcp-server-box).

box freeze-destructive-ops ingress soc2

box · ingress

Guard Box Share Links and External Collaborations

Blocks the externally-visible Box sharing surface — the riskiest Box surface an agent can touch — before the call ever reaches Box:

box guard-share-links sharing external-sharing ingress soc2 hipaa gdpr-ccpa