Short answer: Box has no separate data room product, but its business plans can run a basic one. You get seven permission levels, previewer-only access, link passwords and expiry, and activity reports. What matters for a deal sits in the higher plans: watermarks showing the viewer's e-mail or IP need Enterprise or above, and custom terms of service (the closest thing to an NDA gate) need Business Plus or above and apply to the whole company. There is no time-per-page analytics and no Q&A module. Invited collaborators need a (free) Box account. This guide shows how to set up a Box data room step by step, which plan you need for each feature, and when a dedicated room is simpler.
Box as a data room: what each plan gives you
| Feature | Business | Business Plus | Enterprise | Enterprise Plus |
|---|---|---|---|---|
| Price per user/month, billed yearly (EU price list) | €13.50 | €22.50 | €31.50 | €45 |
| Minimum users | 3 | 3 | 3 | 3 |
| External collaborators | Need paid accounts | Unlimited | Unlimited | Unlimited |
| 7 permission levels, link password and expiry | Yes | Yes | Yes | Yes |
| Watermark with viewer's e-mail/IP and time | – | – | Yes | Yes (custom text too) |
| Custom terms of service before access | – | Yes (company-wide) | Yes | Yes |
| Admin reports (user, folder activity, access stats) | Yes | Yes | Yes | Yes |
| Export all activity of a file | – | Yes | Yes | Yes |
| Box AI questions across several documents | Single document | Single document | Single document | Multi-document |
Sources: box.com/pricing (prices shown in EUR for our region on 7 Nov 2026; monthly billing is 25% more, and USD prices vary by region), watermarking, custom terms of service, file activity, Box AI by plan. Box Shield (classification and access policies) is a paid add-on on top.
How to set up a data room in Box: 7 steps
- Create one top-level folder for the deal – New → Folder. A folder without collaborators stays private (Box basics).
- Build a numbered index – 01 Corporate, 02 Financials, 03 Contracts… Start from our due diligence checklists. Box's own VDR page suggests a folder per deal stage with bidder-specific documents.
- Plan access per party before inviting anyone. Box permissions "waterfall": a person invited to a folder gets every subfolder below it. So build the tree so that each bidder's access is one invitation – e.g. a shared "Phase 1" folder and a separate folder per bidder for anything confidential to them.
- Invite people with the right role – Share → enter e-mails or a group → "Invite as". For outside parties use Previewer (preview only, no download, share or upload) or Viewer (can also download and print). Use Previewer Uploader if they must send you documents. When someone has two roles, the least restrictive one wins.
- Turn on watermarking (Enterprise+) – folder Settings → Watermarking. Every preview then shows the viewer's e-mail or IP and the time of access; Viewers who download also get a watermarked copy.
- Require terms before access (Business Plus+) – your Box admin asks Box to enable Custom Terms of Service, then sets it in Admin Console → Enterprise Settings → Custom Setup for external users. It is one text for the whole company, not per folder, and switching it on puts existing external collaborations into "pending" until they accept.
- Track activity – a file's Details → Content Insights shows its history; Admin Console → Reports → Create Report gives User Activity, Folder Activity and Access Stats (reports).
Box permission levels for a data room
| Role | Preview | Download / print | Upload | Use in a deal for |
|---|---|---|---|---|
| Previewer | Yes | No | No | Bidders and investors in early rounds |
| Viewer | Yes | Yes | No | Advisers who need files offline |
| Previewer Uploader | Yes | No | Yes | A party that must return documents |
| Viewer Uploader | Yes | Yes (originals, no watermark) | Yes | Your lawyers |
| Uploader | Names only | No | Yes | A drop folder |
| Editor / Co-owner | Yes | Yes | Yes | Your deal team only |
Source: Understanding collaborator permission levels.
Shared links or invitations?
A shared link set to "People with the link" opens without a Box account – convenient, but in reports those visitors show only as an IP address and location (or as an e-mail if the link requires e-mail verification). "Invited people only" links and invitations identify every person, but Box asks invited outsiders to sign up for a free Box account first. For a deal, invitations give you the clean audit trail; links are fine for a teaser.
What Box does not do as a data room
- No time per page – you see previews and downloads, not which pages a buyer read or for how long.
- No Q&A module – buyers' questions go by e-mail or comments.
- NDA gate is company-wide – custom terms of service cannot be set per deal or per folder, so a different NDA per transaction does not fit.
- Watermarks only from Enterprise – three users on Enterprise are about €94 a month billed yearly; and Box Notes, zip and some other files cannot be watermarked.
- Accounts for outsiders – invited buyers create Box accounts, which some resist.
Or in HelpRange
If your team already lives in Box, a Box folder with Previewer access is a reasonable room for a friendly, low-stakes deal. If you need the deal features without an Enterprise plan, HelpRange is built for exactly this part:
- One data room per party, guests verified by a one-time e-mail code – no account to create.
- Click-to-sign NDA per room before the first document opens, with a PDF record of e-mail, time and IP.
- Watermarks with each viewer's e-mail on every page, download and print blocking, screenshot protection and image mode, set per room.
- Page-by-page reading time, heatmaps and visit replays; a guest activity report per room, as a page or CSV.
- AI answers for guests from the room's documents, with page references (no human Q&A routing).
- Flat price: $174 a month per team with unlimited users and guests, or the Deal Room Pass at $199 once for 90 days.
HelpRange as a Box alternative · Open the demo data room
FAQ
Can Box be used as a virtual data room?
For simple deals, yes: folders, seven permission levels, previewer-only access and activity reports work on Business plans. Watermarks need Enterprise and a terms-of-service gate needs Business Plus; there is no page-level analytics or Q&A.
Does Box have watermarking?
Yes, on Enterprise plans and above. The watermark shows the viewer's e-mail or IP and the time of access; custom watermark text needs Enterprise Plus or Shield.
Can I require an NDA before someone opens a Box folder?
Only company-wide: Custom Terms of Service (Business Plus and higher) make external users accept your terms before accessing any Box content of your company. It cannot be set per folder.
Do external users need a Box account?
Invited collaborators do (a free account works). Visitors through a "People with the link" shared link do not, but they appear only by IP in reports.
How much does a Box data room cost?
Box charges per user with a 3-user minimum. On the EU price list, Business is €13.50 and Enterprise €31.50 per user per month billed yearly (7 November 2026); watermarks require Enterprise.
Related: Dropbox and DocSend as a data room · SharePoint as a data room · how to set up a data room · data rooms with page heatmaps and audit logs.