BOX INC Commitments Disclosure

Note 8. Commitments and Contingencies

Letters of Credit

As of January 31, 2026 and 2025, we had letters of credit in the aggregate amount of $12.3 million and $11.2 million, respectively, in connection with our operating leases and voluntary disability insurance (VDI) program, which were primarily issued under the available sublimit for the issuance of letters of credit in conjunction with a secured credit agreement as disclosed in Note 9.

Purchase Obligations

Our purchase obligations relate primarily to public cloud hosting services and IT software and support services costs and have terms ranging from two to five years. As of January 31, 2026, future minimum payments under non-cancellable contractual purchases, which were not recognized on our consolidated balance sheet, are as follows, shown in accordance with the payment due date (in thousands):

Legal Matters

From time to time, we are subject to litigation and claims that arise in the ordinary course of business. We investigate litigation and claims as they arise and accrue estimates for resolution of legal and other contingencies when losses are probable and estimable. Although the results of litigation and claims cannot be predicted with certainty, we believe there was not at least a reasonable possibility that we had incurred a material loss with respect to such loss contingencies as of January 31, 2026.

Indemnification

We include service level commitments to our customers warranting certain levels of uptime reliability and performance and permitting those customers to receive credits in the event that we fail to meet those levels. In addition, our customer contracts often include (i) specific obligations that we maintain the availability of the customer’s data through our service and that we secure customer content against unauthorized access or loss, and (ii) indemnity provisions whereby we indemnify our customers for third-party claims asserted against them that result from our failure to maintain the availability of their content or securing the same from unauthorized access or loss. To date, we have not incurred any material costs as a result of such commitments.

Our arrangements generally include certain provisions for indemnifying customers against liabilities if our products or services infringe a third party’s intellectual property rights. It is not possible to determine the maximum potential amount under these indemnification obligations due to the limited history of prior indemnification claims and the unique facts and circumstances involved in each particular agreement. To date, we have not incurred any material costs as a result of such obligations and have not accrued any material liabilities related to such obligations in the consolidated financial statements. In addition, we indemnify our officers, directors and certain key employees while they are serving in good faith in their respective capacities. To date, there have been no claims under any indemnification provisions.