Box data storage FAQ

Where is my Box content stored?

The College instance of Box is hosted in the US and disaster recovery provision also resides in the US. Data is encrypted at rest and in transit at all times.

Whilst Box does offer other storage locations including Europe and UK, the costs associated mean that it is not financially viable and hence Box will remain hosted in the US for the foreseeable future.

Is Box GDPR compliant?

The Box platform and Box organisation is compliant with all GDPR regulations meaning that Box is a viable platform to hold personally identifiable information. Specifically, Box holds the following certifications as demonstration of its GDPR readiness:

  • Processor Binding Corporate Rules, and Controller Binding Corporate Rules, signed by the UK Information Commissioner Office
  • EU-US and Swiss-US Privacy Shield Frameworks
  • Asia-Pacific Economic Cooperation (APEC) Cross-Border Privacy Rules (CBPR)
  • UK Government G-Cloud Framework
  • German TUV Rheinland Certified Cloud Services standards

However, it remains the responsibility of each and every data owner to ensure that suitable controls and procedures are applied to ensure that the data is handled appropriately.  Contact the Data Protection Office for further guidance.

Does Box meet international security and data privacy standards?

Box provides best-in-class security and data privacy standards to meeting international and industry standards including:

  • SOC 1, SOC 2 and SOC3
  • ISO27001/270018
  • Department of Defense Cloud computing Security Requirements Guide
  • FedRAMP Level 4
  • FISMA
  • FINRA/SEC 17a-4
  • HIPAA/HITECH
  • ITAR (International Traffic in Arms Regulations)

Box customers include the US Department of Defence and UK Government Digital Services.

Are there limits on file sizes, uploads and overall data storage?

Although your overall Box account storage quota is unlimited, the maximum file size for uploading an individual file is 15 GB.  Microsoft Internet Explorer places its own file limit of 4GB.

Browser upload or Box sync tools are not recommended for large volumes of data upload. FTP clients should be used instead.

What end user devices does Box support?

Box supports the most recent major releases of the following web browsers and desktop mobile operating systems:

  • Internet Explorer 11+
  • Microsoft Edge (except Box Edit tools)
  • Safari (on MacOS)
  • Firefox
  • Chrome          
  • Windows 7, 8 and 10
  • Android
  • OS X
  • iOS
  • Chrome OS

Details are given in the boxcommunity.

Can I store my published research data sets in Box?

College does not provide a means to issue a DoI for a publication data set held in Box. Therefore, Box is not recommended as a repository for published research data sets.

What happens to my data when I leave College?

Your Box account will be disabled at the same time as your College account is disabled. Data owned by your account will persist beyond the lifetime of your College account and co-owners and collaborators will still be able to access content that has been shared with them.  

I have mistakenly deleted files and folders, is it possible to restore them?

Deleted files can be restored from your personal recycle bin within 30 days of deletion. ICT administrators can restore deleted content within 90 days of the deletion date. After 90 days it is not possible to recover deleted data.

If you are concerned that data may be accidently deleted from a folder, we recommend that you set up alerts to notify you when files or folders are deleted.

Can file transfer speeds be improved?

The most common reason for perceived slow performance with file uploads / transfers occurs when large volumes of files are attempted to be uploaded either via the browser or via the Box sync tools – neither of which are designed for large scale file uploads.

FTP clients are the preferred method of uploading large volumes of data into Box. Details are available from the boxcommunity.