What it is
Box is a cloud content-management platform — file storage, sharing, permissions, retention and e-signature — that has spent 2025 and 2026 turning itself into the content layer AI agents read from. Three pieces matter for ops teams. Box AI answers questions over one file or a set of files and extracts metadata into structured fields. Box Agent, generally available since April 2, 2026 on Enterprise Plus and Enterprise Advanced, takes a plain-language instruction, searches the content library, analyzes selected files such as contracts, and runs multi-step tasks with source citations; file creation in Word, PDF, Excel and PowerPoint is still in beta and limited to Enterprise Advanced. The remote Box MCP server at mcp.box.com lets outside agents — Claude and Microsoft Copilot Studio were the launch partners — search Box, run multi-file Box AI queries and extract metadata, while every call respects the user’s existing Box permissions. Box says it is available on Business plans and above; the older self-hosted MCP server is deprecated.
Box is an independent public company (NYSE: BOX); we found no acquisition or shutdown news in the last 12 months. It reported $321.1 million in revenue for the quarter ended July 31, 2026, up 9% year on year, and guided to about $1.29 billion for the fiscal year.
Where it fits for legal and revenue ops
- Contracts that already live in Box. Many in-house teams never moved executed agreements into a CLM repository; they sit in Box folders shared with sales. Box Agent and metadata extraction can pull counterparty, term, renewal date and governing law into Box metadata templates without migrating anything. That is a scoped use case: a legal-ops manager building a renewal calendar for 2,000 legacy vendor contracts.
- One permission model for every AI front end. If legal works in Harvey or Claude and sales works in Salesforce, the MCP server means each tool reads the same files under the same access rules, instead of each vendor holding a separate copy.
- Signature and retention in the same place. Box Sign is included on business plans, and Box Governance adds retention policies and legal holds, so a deal desk can send, sign and retain a contract without leaving the repository.
Pricing reality
Box’s pricing page shows business plans “from $5 per user/month” and requires at least three users, but most figures sit behind toggles. Third-party trackers (Peony, Toollers, Costbench) agree on annual list prices of roughly $15 per user per month for Business, $25 for Business Plus and $35 for Enterprise; Enterprise Plus is quoted around $50 and often sold as custom; Enterprise Advanced is quote-only. Treat these as list, not paid: Vendr’s purchase data shows a median Box contract of about $35,600 a year across 254 deals, a range of roughly $7,900 to $130,000, and an average saving of about 15% off the first quote.
The AI cost is metered separately in AI Units. Business and Business Plus include none and must buy them; Enterprise includes 1,000 a month, Enterprise Plus 2,000, Enterprise Advanced 20,000. Unused units expire each period. Box Agent in standard mode, Box search and MCP partner apps are not metered (only daily limits apply), but extraction agents, the Q&A and text-generation APIs, Expanded Mode and agents inside Automate workflows draw down units. When the pool runs out, those features stop with an error until it resets or you buy more.
Realistic band: a 100-person ops and legal team on Enterprise Plus pays roughly $35,000–$60,000 a year before AI Unit top-ups, which is the tier you need for Box Agent at all.
Best for
Legal-ops and deal-desk leads at companies that already standardized on Box for contracts and shared files, who want AI search, extraction and agents over that content — and want Claude, Copilot or Agentforce to read it under existing permissions — without a repository migration.
Versus the alternatives
Microsoft SharePoint with Microsoft 365 Copilot is the incumbent by installed base. Pick it when the company is already on Microsoft 365 E3/E5 and files live in SharePoint and OneDrive; adding Box only to get AI is double-paying for storage.
Google Drive with Gemini is the other high-share option. Pick it for Google Workspace companies where contracts are mostly Google Docs.
Glean is the fastest-growing entrant in the AI layer above content stores. Pick it when answers must span Box plus Slack, Jira, Salesforce and email; Glean indexes Box rather than replacing it. See Dust vs Glean.
iManage or NetDocuments win when legal needs matter-centric filing, ethical walls and Outlook email management. Box is a company-wide content store, not a legal DMS.
A dedicated CLM such as Ironclad wins once you need approval workflows, a clause library and negotiation tracking — see CLM vs CMS. Box can stay the archive underneath.
Watch-outs
- The agent sits two tiers above the entry price. Box Agent needs Enterprise Plus or Enterprise Advanced, and file creation needs Advanced. Guard: price the tier you will actually use for the AI workflow, not the Business plan on the pricing page, and get the AI Unit allowance written into the order form.
- AI Units run out silently for users. Only admins see consumption, under AI Insights in the Admin Console; users just get an error. Guard: set a monthly review of AI Insights, keep heavy extraction jobs on a separate budget, and test a 500-contract extraction before committing to a full backfill.
- Agent governance is still shipping. As of a July 21, 2026 announcement, prompt-injection detection runs in log mode only, and agent audit trails and MCP guardrails are slated for later in 2026. Guard: restrict MCP access to a pilot group and to folders without privileged material until block modes and audit trails are live.
- Extraction quality depends on your templates. Metadata extraction fills whatever fields you define, including wrong ones. Guard: build the template with legal, spot-check 50 contracts per field, and keep a human review step before dates drive renewal alerts.