Box review (2026): features, pros and cons, and what to check before you buy
Enterprise content cloud with unlimited storage on business plans and escalating file size, version and AI limits by tier.
Our take for buyers
Box is an enterprise content cloud that scales from SMB to enterprise. Shortlist it if you are a regulated organization needing FedRAMP Moderate or HIPAA, both of which are on the Enterprise tier, or if you need unlimited storage with large file uploads on a business plan. G2 shows 4.2 from 5,175 reviews. The vendor lists more than 1,500 integrations on Business.
Fit depends on which tier you land on, since limits escalate with each. Storage is 100 GB on Business Starter and unlimited above it, upload limits run from 2 GB to 500 GB, and version recovery is 25 on Starter, 50 on Business and Plus, 100 on Enterprise and unlimited on Enterprise Plus and Advanced. Very small teams are a poor fit because all business plans need 3 users minimum.
- Best for
- Regulated organizations needing FedRAMP Moderate or HIPAA (Enterprise tier)
- Starting price
- From $5 per user/month (headline); Individual plan free
- G2 rating
- 4.2 (5,175 reviews)
What is Box?
Enterprise content cloud with unlimited storage on business plans and escalating file size, version and AI limits by tier. Regulated organizations needing FedRAMP Moderate or HIPAA must go to the Enterprise tier. Every business plan needs three users minimum, and unlimited storage starts at Business. Version limits climb with tier (25, 50, 100, unlimited), and 1,500+ integrations may decide it.
Category: Cloud Storage and File Sharing
Box key features
| Criterion | What we found |
|---|---|
| Storage per user and limits | 100 GB on Business Starter; unlimited on Business and up. |
| Sharing and permission controls | Shared-link bandwidth limit 2 TB per user per month on Business plans. |
| Security and encryption | Advanced security (classification, threat detection) from Enterprise. |
| Compliance certifications | FedRAMP Moderate and HIPAA on Enterprise; SOC 1/2/3 support on Business. |
| Version history and recovery | 25 (Starter), 50 (Business, Plus), 100 (Enterprise), unlimited (Enterprise Plus and Advanced) versions. |
| Integrations | 1,500+ integrations (Business) |
| Pricing model and transparency | Per user, 3 user minimum. |
| Target company size | SMB to enterprise. |
Box plans and pricing
| Plan | Price | Unit | Notes |
|---|---|---|---|
| Individual | Free | 1 user | 10 GB, 250 MB upload |
| Business Starter | per user/month | 3 to 10 users, 100 GB, 2 GB upload, 25 versions | |
| Business | per user/month | 3 users min, unlimited storage, 5 GB upload, 50 versions | |
| Business Plus | per user/month | 15 GB upload, advanced admin | |
| Enterprise | per user/month | 50 GB upload, 100 versions, FedRAMP Moderate, HIPAA | |
| Enterprise Plus | Annual billing only | per user/month | 150 GB upload, 24-hour support, Box Agent |
| Enterprise Advanced | Contact sales | custom | 500 GB upload, Box Archive |
Only the $5 headline price is listed here; per-plan prices for the other tiers are not stated.
Who should shortlist Box
A strong fit for
- Regulated organizations needing FedRAMP Moderate or HIPAA (Enterprise tier)
- Teams needing unlimited storage with large file uploads.
A weak fit for
- Very small teams: all business plans need 3 users minimum.
- Buyers wanting public prices above entry tiers (Enterprise Plus shown only on annual toggle)
Box alternatives
Dropbox BusinessSmall teams (Standard is available from 1 user) wanting simple sync and sharing.
Google DriveTeams already on Google Workspace email and Docs.
EgnyteMid-size firms wanting governance and ransomware detection on file storage.
ShareFileAccounting and financial firms needing HIPAA or SEC+FINRA-eligible sharing (Premium and up)
TresoritRegulated teams (HIPAA, legal, finance) that need zero-knowledge encryption.
Microsoft OneDriveOrganizations already on Microsoft 365 and Entra ID.
Security, admin and compliance
Published: FedRAMP Moderate and HIPAA on Enterprise, SOC 1, 2 and 3 support on Business, advanced security from Enterprise, a 3-seat minimum, and enhanced 24-hour support on Enterprise Plus. Not confirmed: which plan includes SSO (it is listed in a comparison without a plan), and SCIM, audit logs, data residency, a DPA and renewal terms. Box Platform add-ons are annual only and unused quantities expire at term end, so check contract term length.
- SAML SSO
- SSO integration listed in comparison; plan not confirmed.
Contract and buying terms
- Contract
- 3 seat minimum.
- Support
- Enterprise Plus adds enhanced 24-hour support.
- Starting price
- From $5 per user/month (headline); Individual plan free.
- Pricing model
- Per user.
- Free plan or trial
- Free plan.
What to test in a Box demo or trial
Decide first which tier your compliance needs require, since FedRAMP Moderate and HIPAA are on Enterprise. In the trial or demo, upload your largest real files against the tier's limit, test version recovery against the cap, and check the shared-link bandwidth limit of 2 TB per user per month on Business plans. Test the integrations you depend on from the 1,500-plus listed. Ask whether Advanced security features such as classification and threat detection, which start at Enterprise, are included in your quote.
Questions to ask Box before you sign
These are the points Box's public pages leave open. Get the answers in writing before procurement signs off.
- Is SCIM provisioning included, or a paid add-on?
- Which plan includes audit logs, and how long are they kept?
- Where is our data stored, and can we choose the region?
- Can we sign your standard DPA without changes?
- What will the price be at renewal, and is the increase capped?
Things to know before a demo
- Business plans require 3 users minimum.
- Max upload size scales from 2 GB to 500 GB by tier.
- Version history is capped (25 to 100) until Enterprise Plus.
- Enterprise Plus pricing is visible only after switching to annual billing; Box Platform add-ons are annual only.
Head-to-head comparisons
Box FAQ
What is Box used for?
Regulated organizations needing FedRAMP Moderate or HIPAA must go to the Enterprise tier. Every business plan needs three users minimum, and unlimited storage starts at Business. Version limits climb with tier (25, 50, 100, unlimited), and 1,500+ integrations may decide it. It suits regulated organizations needing FedRAMP Moderate or HIPAA (Enterprise tier).
Does Box support HIPAA and FedRAMP?
Yes. FedRAMP Moderate and HIPAA are listed on the Enterprise tier.
Which Box plan includes SSO?
SSO integration appears in a plan comparison, but the specific plan is not confirmed. Ask sales which tier includes it.
Is Box suitable for a very small team?
Less so. All business plans require at least 3 users, and Individual is free but limited to one user with 10 GB.
Sources
Every fact on this page comes from Box's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.