BOX FAQs

Request access through the BOX Requests website. Once approved, sign in at stonybrookmedicine.box.com with your UHMC login. Or accept an invitation from someone who already uses Box.

Stony Brook Medicine employees use their UHMC workstation credentials. Non-employees set up a Box username and password if they receive a collaboration invitation.

All users may access Box content from up to 10 devices.

Box works in current versions of Google Chrome, Microsoft Edge, Firefox, and Safari.

Yes, using a personal email, but you may not store Stony Brook University data or information on a personal Box account.

Storage is unlimited. No single file upload may exceed 500 GB.

Any type of data, including confidential data with PHI or PII. You must follow Stony Brook policy, and approval is given case by case.

Dropbox is prohibited. Google Docs may share non-sensitive information with main-campus employees only. For confidential or restricted data including PHI or PII, use Box or OneDrive. Box meets federal guidelines and SBM compliance requirements.

Standard administrative processes apply. You lose access, and collaborators lose access to documents you uploaded. Personal data may not be stored on institutional resources. Use a personal Box account for that.

We would tell everyone, and give you the time and help you need to move your data.

Information Security has approved four apps: Box Sync, Box Edit, Box for Office and Box for Outlook.

Other apps need a Business Associate Agreement before they can handle PHI or PII. This is a HIPAA rule. All requests are closely reviewed.

All activity in Box is logged and accessible to an Enterprise Account administrator. Accidentally deleted data can be restored within 90 days.