Box.com Security (for file attachments)
Our security team is getting the heebie jeebies about Khoros attachments (potentially containing PII) being stored on box.com. How much of a concern is this? I'm aware Microsoft & other major tech...
Forum Discussion
keithkelly, Could you kindly offer additional details regarding your inquiry? If it's related to our company's storage practices, Khoros doesn't utilise Box as a primary enterprise tool. Instead, it is an optional sub-processor within Care and Community if you choose to turn on the "file preview" feature, and it is outlined in our list of sub-processors associated with our products.
Primary concerns
- Our secret / internal / proprietary information being stored in a box.com account that does not belong to us.
- Our security team is unable to simply unblock the subdomain khoros.app.box.com, as there are default box.com domains that are necessary to access - such as app.box.com. I just ran a network trace (via Chromes dev tools) & found a few others like cdn10.boxcdn.net, api.box.com, dl.boxcloud.com, and more.
- Who owns/controls the files?
