Can I use Box to store sensitive data that is covered by laws such as HIPAA and ePHI?
Box should NOT be used to collect, process, store or share ePHI, FERPA, PII or sensitive restricted data until further notice. This service should never be used to store high-risk data, as outlined in our Data Classification policy:
