Box Inc. Secures FedRAMP High Authorization: A Milestone for Government Cloud Solutions

In a landmark announcement on March 27, 2025, Box Inc. (NYSE: BOX), a leader in Intelligent Content Management (ICM), revealed that it has achieved FedRAMP High Authorization. This prestigious certification enables U.S. government agencies and authorized contractors to utilize Box’s platform for managing highly sensitive data, further solidifying Box's position as a trusted provider in the public sector.

Box’s FedRAMP High Authorization includes over 421 rigorous security controls, reflecting the company's commitment to safeguarding customer data. Tom Cowles, Chief Compliance Officer at Box, emphasized the significance of this achievement, stating, “Achieving FedRAMP High certification involves extensive documentation of our security controls and a rigorous audit to ensure we meet the highest standards for protecting customer data.”

This certification complements Box's existing Department of Defense Impact Level 4 Authorization for Controlled Unclassified Information (CUI), thereby enhancing the platform's security credentials for government use. Cowles noted that the authorization allows government agencies to manage their content securely while leveraging AI-enhanced experiences and automating workflows that replace outdated systems.

The announcement highlights Box's collaboration with Carahsoft, a leading government IT solutions provider. Bethany Blackwell, Program Executive for Cloud Solutions at Carahsoft, praised Box’s achievement, remarking, “Box's achievement of FedRAMP High is a testament to their commitment to security, and we're proud to be their partner in bringing this critical capability to the Public Sector."

Box's commitment to innovation is evident in its FedRAMP High-compliant AI offerings. The company’s Box AI platform, launched in May 2023, integrates cutting-edge large language models, including Microsoft’s Azure OpenAI Service, AWS Bedrock, Claude via AWS, and Google Cloud’s Vertex AI. This flexibility allows government agencies to leverage advanced capabilities in content management.

The FedRAMP High Authorization is a testament to Box's dedication to meeting stringent security and compliance standards. The assessment was conducted by the U.S. Department of Veterans Affairs, ensuring that Box can handle sensitive government data, including Personally Identifiable Information (PII) and sensitive patient records.

Additionally, Box integrates seamlessly with other FedRAMP High-compliant platforms such as Salesforce, Microsoft GCC High, ServiceNow, and Okta. This interoperability ensures that government agencies can maintain efficient workflows while adhering to secure and compliant environments.

Amy Machado, Senior Research Manager at IDC, highlighted the critical importance of content security for federal agencies, particularly in light of today’s heightened threat landscape. She stated, “With this authorization, Box’s Intelligent Content Management platform can help agencies that handle the government's most sensitive, unclassified data, accelerate business processes, power workplace collaboration, and protect their most valuable information.”

Box currently holds Moderate Authorizations to Operate (ATOs) with various U.S. government agencies, including the Department of Justice, Department of the Navy, and NASA. These partnerships enable Box to support public safety, drive business growth, and address pressing societal challenges across sectors such as law enforcement, finance, and healthcare.

The FedRAMP High authorization is now available to customers on Box’s Enterprise Plus and Enterprise Advanced plans, ensuring that government agencies can take full advantage of these secure and compliant solutions.

Box Inc.'s achievement of FedRAMP High Authorization marks a significant milestone in the evolution of cloud solutions for government agencies. As the company continues to innovate and expand its offerings, it reinforces its status as a leader in Intelligent Content Management, committed to enhancing security and efficiency in the public sector. For more information about Box's FedRAMP High authorization and ongoing innovations, visit the Box blog.