ZapBounce

ZapBounce and Box

Box is chosen by organizations that care about governance: retention policies, classifications, audit trails on every file access.

A verification job on a file in Box should respect the same rules the file does, and deleting the job after download is the control that makes that possible.

A governed file processed by an ungoverned service

A file classified as restricted in Box, with a retention policy and an access log, does not stop being restricted when its contents are sent to a third-party API.

If that third party keeps the data after you have your results, your retention policy has quietly been extended in a system your audit does not cover.

Calling DELETE /v1/jobs/{id} once the results are downloaded removes the job, which is the step that lets the classification hold.

How the data moves

  1. Delete the job once results are downloaded

    For restricted data, call DELETE /v1/jobs/{id} right after the export, so nothing lingers beyond the run.

  2. Read through the Box API with a service account

    So the access appears in Box's audit log like any other access.

  3. Write results back into Box with the same classification

    The results file contains the same addresses and deserves the same treatment.

  4. Record the job id in your own audit trail

    So a later question about what was processed has an answer that does not depend on our records.

Setting it up

  1. Create a separate API key for restricted-data work so its use is easy to audit.
  2. Read files through the Box API with a service account so access is logged.
  3. Verify and download results immediately, then delete the job with DELETE /v1/jobs/{id}.
  4. Upload the results file to Box with the same classification as the source.
  5. Record the job id and date in your own processing log.
  6. Review the arrangement with whoever owns the classification policy before the first run.

Box: common questions

How do I keep a restricted file restricted?

Download the results immediately, delete the job, and classify the results file the same as the source.

Can I re-download results later?

Not after the job is deleted. That is the trade, and it is why the download has to be part of the run.

Does verification need a processing agreement?

For governed data, ask before the first run. It is a shorter conversation than an audit finding.

Reference

Check a Box export today

100 free checks a month, no card. Unknown results are refunded.

Get an API keySee pricing