Sanaf AI
Start free
File Management & Storage

Box, worked by an AI employee

Not another app for your team to learn, and not a set of rules for you to build. You hire an AI employee, you give it access to your Box account, and you ask it for things in Slack or Teams the way you would ask anyone else on the team. There is nothing to map and nothing to maintain.

  • File Management & Storage
  • Signs in to your account
  • 100 ready-made tools
  • Asked in Slack or Teams
At work

An illustration of how the conversation reads, not a transcript from a client account.

What Box is

Box is a cloud content management platform for secure file storage, sharing, collaboration, and governance.

You sign in with your own Box account, the same way you already do. We never see or hold your password.

It can also be told by Box when something happens, rather than only doing things when you ask.

How a run works

One message in, the work done in Box.

  1. 01

    You ask

    You message your AI employee in the chat your team already has open, in one sentence, in your own words.

  2. 02

    It works out the step

    It decides what the job needs in Box. You do not pick anything from a menu or wire anything together.

  3. 03

    It does the work

    Signed in to your own Box account, inside the access you granted it, doing the thing you asked for.

  4. 04

    It reports back

    It tells you what it did, in the same thread. If it could not do something, it says so rather than guessing.

100 tools it already has

What it can do in Box

These are the ready-made tools your AI employee already has in Box. It is not limited to them, but it never has to be taught these.

  • Add classification to fileAdds a classification to a file by specifying the label of the classification to add. this api can also be called by including the enterprise id in the url explicitly, for example
  • Add classification to folderAdds a classification to a folder by specifying the label of the classification to add. this api can also be called by including the enterprise id in the url explicitly, for exampl
  • Add domain to list of allowed collaboration domainsCreates a new entry in the list of allowed domains to allow collaboration for.
  • Add initial classificationsWhen an enterprise does not yet have any classifications, this api call initializes the classification template with an initial set of classifications. if an enterprise already has
  • Add or update user avatarAdds or updates a user avatar.
  • Add shared link to fileAdds a shared link to a file.
  • Add shared link to folderAdds a shared link to a folder.
  • Add shared link to web linkAdds a shared link to a web link.
  • Add user to groupCreates a group membership. only users with admin-level permissions will be able to use this api.
  • Apply watermark to fileApplies or update a watermark on a file.
  • Apply watermark to folderApplies or update a watermark on a folder.
  • Ask questionSends an ai request to supported llms and returns an answer specifically focused on the user's question given the provided context.
  • Assign legal hold policyAssign a legal hold to a file, file version, folder, or user.
  • Assign retention policyAssigns a retention policy to an item.
  • Assign storage policyCreates a storage policy assignment for an enterprise or user.
  • Assign taskAssigns a task to a user. a task can be assigned to more than one user by creating multiple assignments.
  • Authorize userAuthorize a user by sending them through the box website and request their permission to act on their behalf. this is the first step when authenticating a user using oauth 2.0. to
  • Cancel box sign requestCancels a sign request.
  • Change shield information barrier statusChange status of shield information barrier with the specified id.
  • Commit upload sessionClose an upload session and create a file from the uploaded chunks. the actual endpoint url is returned by the create upload session and get upload session endpoints.
  • Copy fileCreates a copy of a file.
  • Copy file requestCopies an existing file request that is already present on one folder, and applies it to another folder.
  • Copy folderCreates a copy of a folder within a destination folder. the original folder will not be changed.
  • Create ai agentCreates an ai agent. at least one of the following capabilities must be provided: ask, text gen, extract.
  • Create box sign requestCreates a signature request. this involves preparing a document for signing and sending the signature request to signers.
  • Create box skill cards on fileApplies one or more box skills metadata cards to a file.
  • Create collaborationAdds a collaboration for a single user or a single group to a file or folder. collaborations can be created using email address, user ids, or a group ids. if a collaboration is bei
  • Create commentAdds a comment by the user to a specific file, or as a reply to an other comment.
  • Create email aliasAdds a new email alias to a user account..
  • Create folderCreates a new empty folder within the specified parent folder.
  • Create folder lockCreates a folder lock on a folder, preventing it from being moved and/or deleted. you must be authenticated as the owner or co-owner of the folder to use this endpoint.
  • Create groupCreates a new group of users in an enterprise. only users with admin permissions can create new groups.
  • Create jobs to terminate user group sessionValidates the roles and permissions of the group, and creates asynchronous jobs to terminate the group's sessions. returns the status for the post request.
  • Create jobs to terminate users sessionValidates the roles and permissions of the user, and creates asynchronous jobs to terminate the user's sessions. returns the status for the post request.
  • Create legal hold policyCreate a new legal hold policy.
  • Create metadata cascade policyCreates a new metadata cascade policy that applies a given metadata template to a given folder and automatically cascades it down to any files within that folder. in order for the
  • Create metadata instance on fileApplies an instance of a metadata template to a file. in most cases only values that are present in the metadata template will be accepted, except for the global.properties templat
  • Create metadata instance on folderApplies an instance of a metadata template to a folder. in most cases only values that are present in the metadata template will be accepted, except for the global.properties templ
  • Create metadata templateCreates a new metadata template that can be applied to files and folders.
  • Create retention policyCreates a retention policy.
  • Create shield information barrierCreates a shield information barrier to separate individuals/groups within the same firm and prevents confidential information passing between them.
  • Create shield information barrier reportCreates a shield information barrier report for a given barrier.
  • Create shield information barrier segmentCreates a shield information barrier segment.
  • Create shield information barrier segment memberCreates a new shield information barrier segment member.
  • Create shield information barrier segment restrictionCreates a shield information barrier segment restriction object.
  • Create slack integration mappingCreates a slack integration mapping by mapping a slack channel to a box item. you need admin or co-admin role to use this endpoint.
  • Create taskCreates a single task on a file. this task is not assigned to any user and will need to be assigned separately.
  • Create teams integration mappingCreates a teams integration mapping by mapping a teams channel to a box item. you need admin or co-admin role to use this endpoint.
  • Create terms of serviceCreates a terms of service for a given enterprise and type of user.
  • Create terms of service status for new userSets the status for a terms of service for a user.
  • Create upload sessionCreates an upload session for a new file.
  • Create upload session for existing fileCreates an upload session for an existing file.
  • Create userCreates a new managed user in an enterprise. this endpoint is only available to users and applications with the right admin permissions.
  • Create user exemption from collaboration domain restrictionsCreate user exemption from collaboration domain restrictions.
  • Create user inviteInvites an existing external user to join an enterprise. the existing user can not be part of another enterprise and must already have a box account. once invited, the user will re
  • Create web linkCreates a web link object within a folder.
  • Create webhookCreates a webhook.
  • Create zip downloadCreates a request to download multiple files and folders as a single zip archive file. this api does not return the archive but instead performs all the checks to ensure that the u
  • Delete ai agentDeletes an ai agent using the provided parameters.
  • Delete fileDeletes a file, either permanently or by moving it to the trash. the the enterprise settings determine whether the item will be permanently deleted from box or moved to the trash.
  • Delete file requestDeletes a file request permanently.
  • Delete folderDeletes a folder, either permanently or by moving it to the trash.
  • Delete folder lockDeletes a folder lock on a given folder. you must be authenticated as the owner or co-owner of the folder to use this endpoint.
  • Delete retention policyPermanently deletes a retention policy.
  • Delete shield information barrier segmentDeletes the shield information barrier segment based on provided id.
  • Delete shield information barrier segment member by idDeletes a shield information barrier segment member based on provided id.
  • Delete shield information barrier segment restriction by idDelete shield information barrier segment restriction by id.
  • Delete slack integration mappingDeletes a slack integration mapping. you need admin or co-admin role to use this endpoint.
  • Delete teams integration mappingDeletes a teams integration mapping. you need admin or co-admin role to use this endpoint.
  • Delete userDeletes a user. by default this will fail if the user still owns any content. move their owned content first before proceeding, or use the force field to delete the user and their
  • Delete user avatarRemoves an existing user avatar. you cannot reverse this operation.
  • Download fileReturns the contents of a file in binary format.
  • Download zip archiveReturns the contents of a zip archive in binary format. this url does not require any form of authentication and could be used in a user's browser to download the archive to a user
  • Extract metadata freeformSends an ai request to supported large language models (llms) and extracts metadata in form of key-value pairs. in this request, both the prompt and the output can be freeform. met
  • Extract metadata structuredSends an ai request to supported large language models (llms) and returns extracted metadata as a set of key-value pairs. for this request, you either need a metadata template or a
  • Find app item for shared linkReturns the app item represented by a shared link. the link can originate from the current enterprise or another.
  • Find file for shared linkReturns the file represented by a shared link. a shared file can be represented by a shared link, which can originate within the current enterprise or within another. this endpoint
  • Find folder for shared linkReturn the folder represented by a shared link. a shared folder can be represented by a shared link, which can originate within the current enterprise or within another. this endpo
  • Find metadata template by instance idFinds a metadata template by searching for the id of an instance of the template.
  • Find web link for shared linkReturns the web link represented by a shared link. a shared web link can be represented by a shared link, which can originate within the current enterprise or within another. this
  • Force apply metadata cascade policy to folderForce the metadata on a folder with a metadata cascade policy to be applied to all of its children. this can be used after creating a new cascade policy to enforce the metadata to
  • Generate textSends an ai request to supported large language models (llms) and returns generated text based on the provided prompt.
  • Get ai agent by agent idGets an ai agent using the agent id parameter.
  • Get ai agent default configurationGet the ai agent default config
  • Get allowed collaboration domainReturns a domain that has been deemed safe to create collaborations for within the current enterprise.
  • Get box sign request by idGets a sign request by id.
  • Get box sign template by idFetches details of a specific box sign template.
  • Get classification on fileRetrieves the classification metadata instance that has been applied to a file. this api can also be called by including the enterprise id in the url explicitly, for example /files
  • Get classification on folderRetrieves the classification metadata instance that has been applied to a folder. this api can also be called by including the enterprise id in the url explicitly, for example /fol
  • Get collaborationRetrieves a single collaboration.
  • Get collection by idRetrieves a collection by its id.
  • Get commentRetrieves the message and metadata for a specific comment, as well as information on the user who created the comment.
  • Get current userRetrieves information about the user who is currently authenticated. in the case of a client-side authenticated oauth 2.0 application this will be the user who authorized the app.
  • Get device pinRetrieves information about an individual device pin.
  • Get events long poll endpointThe listevents endpoint provides information about the events available in the box system. this options method allows developers to discover the capabilities and requirements for i
  • Get file informationRetrieves the details about a file.
  • Get file requestRetrieves the information about a file request.
  • Get file thumbnailRetrieves a thumbnail, or smaller image representation, of a file. sizes of 32x32,64x64, 128x128, and 256x256 can be returned in the .png format and sizes of 32x32, 160x160, and 32
  • Get file versionRetrieve a specific version of a file. versions are only tracked for box users with premium accounts.
  • Get files under retentionReturns a list of files under retention for a retention policy assignment.
20 things it can watch for

What Box can tell it about

It does not only wait to be asked. These are the things Box can tell your AI employee about the moment they happen, so it can act without anyone noticing first.

  • Box Sign Request Status ChangedA Box Sign request's status or meaningful fields change. This trigger monitors a specific Box Sign request and fires when changes are detected in key fields like stat
  • Collaboration Details ChangedA collaboration's details change (e.g., role, status, expiration). This trigger monitors a specific collaboration and detects when any meaningful field changes, such
  • Comment ChangedA comment's content or details change in Box. This trigger monitors a specific Box comment and detects when any meaningful field changes, such as message text edits,
  • File Metadata ChangedA file's metadata or properties change in Box. This trigger monitors a specific Box file and fires when changes are detected in key fields like name, description, siz
  • File Shared Link ChangedA file's shared link settings change in Box. This trigger monitors a specific Box file's shared link and fires when changes are detected in the shared link configurat
  • Folder Properties ChangedA folder's core properties change in Box. This trigger monitors a specific Box folder and fires when changes are detected in properties like name, description, modifi
  • Folder Shared Link ChangedA folder's shared link settings change in Box. This trigger monitors a specific Box folder's shared link and fires when changes are detected in the shared link config
  • New File Added to FolderA new file is added to a folder in Box. This trigger monitors a specific Box folder and fires when new files are detected. Only files (not folders or web links) are m
  • New File Comment AddedA new comment is added to a file in Box. This trigger monitors a specific Box file and fires when new comments are detected.
  • New File Version UploadedA new file version is uploaded to a file in Box. This trigger monitors a specific Box file and fires when new versions are detected.
  • New Folder Collaboration CreatedA new collaboration is created on a specific folder in Box. This trigger monitors a specific Box folder and fires when new collaborations are detected.
  • New Item Added to FolderA new item (file, folder, or web link) is added to a folder in Box. This trigger monitors a specific Box folder and fires when new items are detected.
  • New Pending Collaboration InviteA new pending collaboration invite is created. This trigger monitors the user's pending collaborations and fires when new pending collaboration invites are detected.
  • New Sign Request CreatedA new Box sign request is created. This trigger monitors Box sign requests and fires when new sign requests are detected.
  • New Task Assignment AddedA new assignment is added to a task in Box. This trigger monitors a specific Box task and fires when new assignments are detected.
  • New Task Created on FileA new task is created on a Box file. This trigger monitors a specific Box file and fires when new tasks are detected.
  • Task Assignment State ChangedA task assignment's state changes. This trigger monitors task assignments for a specific task and detects when the resolutionstate changes (e.g., from incomplete to c
  • Task State ChangedA task's status or details change in Box. This trigger monitors a specific Box task and fires when changes are detected in key fields like status, due date, message,
  • Trashed File State ChangedA file's trash state changes in Box. This trigger monitors a specific Box file and fires when its trash state changes (e.g., moved to trash or restored from trash).
  • Trashed Folder State ChangedA folder's trash state changes in Box. This trigger monitors a specific Box folder and fires when its trash state changes (e.g., moved to trash or restored from trash
Access, and who is in charge of it

You stay the boss of your Box account.

Nothing connects until you approve it. You grant access one app at a time, you can take it back the same way, and everything your AI employee does in there is written down where you can see it.

How we handle your data
  • It signs in to your own Box account. You are not moving anything into ours.
  • You grant access one app at a time, and you can take it back the same way.
  • Everything it does in Box is written down, with what it did and when.
  • Anything you tell it to check with you first, it checks with you first.
Other apps in the same corner of the business

It works in Box and the rest of your software in the same job

A real job rarely stays in one place. Reading a message in one app, checking a record in another and writing the result in a third is one request to your AI employee, not three.

See every app

Questions people ask about Box

Can an AI employee really work inside Box?
Yes. It signs in to your own Box account and works in it the way a new hire would, from the chat your team already has open. Nobody installs anything, and nobody learns a new screen.
Do I have to move anything out of Box?
No. Nothing moves and nothing is replaced. Your records stay in Box, your team carries on in the same screens they used yesterday, and your AI employee works alongside them in there.
How does it get into my Box account?
You sign in with your own Box account, the same way you already do. We never see or hold your password. You approve it before anything connects, and you can take the access back the same way you gave it.
What can it actually do in Box?
It has 100 ready-made tools in Box today, among them Add classification to file, Add classification to folder and Add domain to list of allowed collaboration domains. The full list is on this page. It is not limited to those, but it never has to be taught them.
Can it use Box and the rest of my software in the same job?
Yes, and that is usually the point. Reading a message in one app, checking a record in Box and writing the result somewhere else is one request to your AI employee, not three separate ones you stitch together.
Who decides what it is allowed to do in Box?
You do. You grant access one app at a time and can withdraw it at any time, anything you ask it to check with you first it checks with you first, and everything it does in Box is written down with what it did and when.