Access & accounts
How do I get a Stony Brook enterprise Box account?
Request access through the BOX Requests website. After approval, sign in at stonybrookmedicine.box.com with your UHMC credentials, or accept a collaboration invitation from an existing user.
Do I need a separate username and password?
Stony Brook Medicine employees use their UHMC workstation credentials. Non-employees set up a Box username and password if they receive a collaboration invitation.
What devices can I use?
All users may access Box content from up to 10 devices.
What browsers are supported?
Box works in Internet Explorer, Firefox, Google Chrome, and Safari.
Can I have a personal Box account?
Yes, using a personal email, but you may not store Stony Brook University data or information on a personal Box account.
Data & storage
How much storage do I get?
Storage is unlimited. No single file upload may exceed 500 GB.
What types of data can I store?
All data types, including confidential and restricted data with PHI and PII, but you must adhere to institutional policies, and approval is granted case by case.
Can I use Dropbox or Google Docs instead?
Dropbox is prohibited. Google Docs may share non-sensitive information with main-campus employees only. For confidential or restricted data including PHI or PII, use Box or OneDrive. Box meets federal guidelines and SBM compliance requirements.
What happens to my data if I leave the institution?
Standard administrative processes apply. You lose access, and collaborators lose access to documents you uploaded. Personal data may not be stored on institutional resources. Use a personal Box account for that.
What if Stony Brook cancels its Box contract?
All users would be informed and given the resources and time necessary to move their data to another resource.
Security & apps
Which applications are approved to run on Box?
Only Box Sync, Box Edit, Box for Office, and Box for Outlook have been approved by Information Security.
What about other third-party apps?
Third-party apps require Business Associate Agreements for HIPAA compliance when handling PHI/PII. All requests are closely reviewed.
How is access tracked, and can deleted data be recovered?
All activity in Box is logged and accessible to an Enterprise Account administrator. Accidentally deleted data can be restored within 90 days.