I was directed here by Box Support after they weren't able to provide a solution for the fact that the "Export" button for Access Stats is missing for some Box users. This is not a request for functionality; this is a must to fix. The Export option does exist for some clients and it no longer exists for others. This is a valuable part of the audit trail provided by Access Stats and not be able to export it is a limitation. Again, this works for some Box clients and not others.

The 2-factor authentication that Box.com currently offers for Enterprise accounts is only applicable for unrecognized logins. Would it be possible for Box.com to offer 2-factor authentication for every login in addition to the current unrecognized logins as an improvement/enhancement in the future release. This would help choose which feature customers want. If a customer wants to strictly enforce 2-step authentication with every login, it would help to have that option available as with the current option, it is not possible to do so except for unrecognized logins.

Could you please provide a full GXP Compliance framework ?

Up to now, 80% are covered by Box GXP and the other 20% need services from consultancy company such as USDM.