Box: Frequently Asked Questions
Accessing Previous Versions of Box Files
Click here to learn how to access previous versions of Box files.
Assigning Tasks in Box
Click here to learn how to assign tasks in Box.
Changing Account Information
Click here to learn how to change your account information in Box.
Collaborator Permissions
Click here to learn how to set permissions for your collaborators.
Recovering Deleted Items in Box
Click here to learn how to recover deleted items in Box.
Searching Files in Box
Click here to learn how to search files in Box.
Sharing Files/Folders in Box
Click here to learn how to share files/folders in Box.
Tagging Files in Box
Click here to learn how to tag files in Box.
Vanderbilt Box Data Policy
Box provides robust security for stored data. State-of-the-art technology and industry best practices are used for data encryption during transit of data to and from the Box cloud and while data is being stored within Box. However, due to federal, state, and local laws and university policies and standards, Box should not be used to store, collect, or share certain types of regulated and sensitive data.
University faculty and staff are responsible for safeguarding data stored on computers, devices, and with online services. To ensure secure data transfer, faculty and staff should only use the Box web interface (found at https://vanderbilt.box.com ) or official Box apps to transfer data to Box.
A breakdown of permissions by data type is provided below:
| Data Type | Permitted | Not-Permitted | Examples |
|---|---|---|---|
| Non-confidential or general business |
● |
||
|
De-identified human subject research |
● |
Data that does not include any information which could be used to identify the individuals involved in the research |
|
| Sensitive identifiable human subject research | ● |
|
Any individually identifiable research data containing sensitive information about mental health, genetics, alcohol & drug abuse, or illegal behaviors |
|
Student educational records (FERPA) |
● |
|
Grades, student transcripts, degree information, disciplinary records and class schedule |
|
Protected health information
|
● |
|
Any unique identifying attribute, characteristic, code or combination that allows identification of an individual, and that is combined with medical or health information. Examples include, but not limited to, data of birth, date of death, email addresses, telephone numbers and device ID numbers |
|
Social Security Numbers |
● |
123-45-6789 |
|
|
Gramm Leach Bliley (GLBA) student loans application information |
● |
Student loan information, payment history and student financial aid data | |
| Payment card information (PCI) |
● |
Cardholder name, account number, expiration date, verification number, security code | |
| Export controlled research (ITAR, EAR) |
● |
Data containing research on items such as chemical and biological agents, satellite communications, certain software or technical data, and work on formulas for explosives | |
| FISMA data |
● |
Any government data that is regulated by the Federal Information Management and Security Act, including VA data, FDA data and Medicare data |