Help shape the future of Box
Welcome to Box Pulse, our product feedback tool powered by UserVoice. Got an idea for how to improve Box? Share it with us and gather support or vote on other people's ideas. Your feedback is essential to informing roadmap decisions and shaping the future of our products. Thanks for joining our community!
See user guide here.
203 results found
-
Security & Governance Risk Caused by Retained Collaborations After Folder Moves
To help prevent unintended external access to internal-only content and strengthen data governance, we would like to request a feature that either controls collaboration inheritance when folders are moved or restricts folder moves within designated folder hierarchies.
In the current Box environment, my understanding is that when a folder is moved, any collaborations directly assigned to that folder are retained.
This behavior may lead to situations where folders with different access policies become mixed within the same hierarchy. For example, a folder collaborated with external users could be moved into a directory intended exclusively for internal use. As a result,…
2 votes -
I'd like the trash bin status to be reverted to the previous specification.
Regarding the BOX trash bin, since around August 12, 2025, all files appear to have the "10 years" policy applied to the trash bin, so I would like you to restore it to the previous state.
Please refer to the attached image for the previous state.12 votes -
Allow retention policies to dispose content to Trash, not only permanently delete
Please allow a retention policy disposition of Delete (move to Trash), not only Permanently delete.
Background: With permanent deletion, content can be removed without anyone noticing, so we may not detect that it has been deleted.
1 vote -
Generated alerts from the Box.com system for data classification policies that have found sensitive data
When a data classification is set to detect social security or credit card numbers and detects that, generate an alert email to be sent to the Admins. This was an option under the old Governance solution. That ability was lost under the new Shield Classification method. Why are third party tools required, such as a SIEM, to get notifications of sensitive data?
1 vote -
Generated alerts from the Box.com system for data classification policies that have found sensitive data
When a data classification is set to detect social security or credit card numbers and detects that, generate an alert email to be sent to the Admins. This was an option under the old Governance solution. That ability was lost under the new Shield Classification method. Why are third party tools required, such as a SIEM, to get notifications of sensitive data?
1 vote -
Ability to create retention policies list/report with status
Currently, administrators do not have the capability to list, generate reports, or export all existing retention policies in .csv format within Box. It would be good if Box provide functionality to facilitate this oversight and compliance management.
1 vote -
Disposition Report should be able to show files that were deleted in the past
It's important for GxP compliance and ease of auditing to know what files were disposed of in the past, or during a specific period, like in the last 30 days, last 6 months, etc.
Disposition report should be able to show previous deletions, not just upcoming deletions, and admins should be able to filter by retention policy, and date.
31 votesthe reporting on deleted content is under consideration but the requirement will be satisfied by different solution
-
Request for a Role That Can Manage Collaborators Without Access to Folder Settings
We would like to request an enhancement to Box's permission model.
Business Requirements
Our organization has the following requirements:Delegate collaborator management to designated power users.
Restrict folder configuration and administrative settings to the IT department only.Current Limitation
Currently, we cannot satisfy both requirements simultaneously with the existing roles.
Option 1: Power Users as Co-OwnersPower users can manage collaborators, which meets our first requirement.
However, they can also modify folder settings, which conflicts with our governance policy.Option 2: Power Users as Editors with Collaborator Management Enabled
Power users can manage collaborators without having access to all folder…
1 vote -
Retain only recent versions of files
A lot of storage space is dedicated to old versions of files that will never be needed. We would like the ability to retain large number of versions of content in the short term, but to only keep few versions older than a year.
1 vote -
Enable longer retention policies (Specifically 150 yr policy option)
At USAA life Insurance we have many documents that need a longer retention policy of 150yrs and the longest you have available is 50 yrs. We have 2 million documents that we cannot apply a policy to because of this issue.
2 votes -
Add Content-Disposition to Access-Control-Expose-Headers
The Download endpoint returns a content-disposition header with file name however Content-Disposition is not part of the Access-Control-Expose-Headers, therefore the file name cannot be derived by frontend javascript applications.
Adding Content-Disposition to Access-Control-Expose-Headers will allow frontend applications to access the file name of the content.
1 vote -
Records management certificate of destruction
In order to support a variety of compliant content management use cases, GxP validation, and fulfill various audit requirements, Box should provide business-centric proof that a record (one to many files with versioned metadata) has been properly disposed according to a retention schedule. Business leaders engaged in a GxP audit need more visibility into records beyond what is available in technical solutions like the Event Stream API and / or Box admin-level reporting.
16 votes -
Multiple classifications labels
Hi - We would like to have the ability to add multiple classification labels on a folder or file.
ie. One for external domain and another for Download Restriction4 votes -
Enable Unlimited or Queued Legal Hold Exports with No Restriction
Currently, Box limits the number of concurrent legal hold exports to two. Multiple cases, custodians, or collection exports become cumbersome, especially when managing large eDiscovery workloads. Additionally, there is no queue system for pending exports: users must manually retry once an export completes.
Proposed Enhancement
Remove or raise the export limit (e.g., allow up to 5 exports at once).Add a queued export mechanism: new requests can be submitted even when the limit is reached and automatically begin when slots free up.
Provide UI indicators for queued exports, completion status, and estimated start time.
Include log entries in the admin…
1 vote -
Automatically Delete Files After Purge Policy Period (Respecting Legal Hold)
While retention policies provide timed safeguarding, the system does not guarantee automatic deletion of items once the retention period ends particularly when a purge policy is specified. End users must rely on manual deletion or scheduled processes.
This enhancement would ensure that files automatically expire and are permanently deleted via defined purge policies unless they’re subject to a Legal Hold, which always takes priority.
Proposed Functionality:
At retention expiration, system automatically deletes files according to defined purge rules.Legal Hold overrides deletion, preventing removal until hold is lifted.
The system logs all auto-deletions in audit trails, identifying the purge policy…
1 vote -
Enable End Users to Apply Existing Retention Policies to Their Content
Currently, only administrators can assign retention policies to content in Box. This central control is important for compliance, but it also creates workflow bottlenecks when end users need to apply retention to content immediately for governance, regulatory, or project-specific reasons.
Allowing end users to apply pre-approved, administrator-created retention policies or templates to their own content would:
Empower teams to self-govern content in line with company compliance standards.
Reduce admin overhead and delays.
Ensure governance rules are applied at the point of content creation, rather than after-the-fact by admins.
1 vote -
Allow Early Removal of Retention Policy from Specific Content Before Period Ends
Currently, Box retention policies apply for the entire duration set and cannot be removed from individual files or folders before the retention period ends—unless the entire policy assignment is removed.
This limitation creates operational challenges in scenarios where:
Certain files are retained longer than necessary due to changes in compliance requirements.
Content is mistakenly placed under a retention policy but only a small subset needs early release.
Legal, compliance, or business needs require faster deletion of specific files without impacting other content under the same policy.
Introduce the ability for authorized administrators to remove or override a retention policy on…
1 vote -
Trusted Enterprises for Governance customers
The ability to configure specific enterprises between which users and data can be migrated freely without adjusting governance settings
1 vote -
Mirror/Duplicate Folder Settings When Making a New Folder
When I'm making a new folder, it would be great to have the option to automatically mirror or duplicate the settings and permissions from another folder.
1 vote -
Notification when outbound collaboration is blocked by collaboration whitelist
When outbound collaboration is restricted by Box Governance's collaboration whitelist, folder invitations addressed to our managed users from users outside the whitelist will be blocked.
If the source of the invitation is a legitimate business partner, the company user must ask the administrator to add the domain to the whitelist, but the company user receiving the invitation has no way of knowing that it has been blocked.
Thus, the application does not occur, and many collaboration opportunities are lost without being noticed.
(The invitee will receive an error message, but only a handful of Box professionals will understand the message…2 votes
- Don't see your idea?