Box has unveiled a new suite of security and governance capabilities designed to help organizations securely deploy and manage AI agents interacting with enterprise content. The enhancements extend Box’s enterprise-grade security framework to both Box Agents and third-party AI agents, including Claude, ChatGPT, and Gemini, enabling organizations to maintain visibility and control over how AI systems access, modify, and use sensitive business information. Key capabilities include agent guardrails, oversight of third-party agent activity, prompt injection detection, agent classification-based access policies, and enhanced governance controls that ensure every AI action is permissioned, intentional, and fully auditable. The new features address growing enterprise concerns around AI adoption, as Box’s 2026 State of Enterprise AI report found that 90% of IT leaders view security, regulatory compliance, and trust as the biggest barriers to granting AI agents access to enterprise content.
Also Read: LTM Partners with Glean to Accelerate Enterprise AI Adoption with Unified Knowledge Intelligence
By embedding these protections directly into the content layer, organizations can confidently scale AI deployments while preserving governance across agentic workflows. “83 percent of organizations are already experimenting with AI agents across their most critical tasks,” said Manoj Asnani, VP of AI Security, Privacy, Compliance & Governance Products at Box. “As these agentic workflows become more deeply embedded in the enterprise, it’s critical to create the proper security controls to ensure agents have what they need to function effectively, without accessing, modifying, or exposing content beyond the scope of its intended task. Box already provides a safe environment for organizations to apply AI to their most critical business knowledge, and with these new controls, we are creating a standard for deploying agents of any kind securely and at scale.”