Box (BOX) Q2 2027 earnings call transcript

Transcript, summary, guidance, and what analysts pressed on from the Box Inc. call on August 24, 2026.

Held
August 24, 2026
Length
56 min
Tone
Confident0.82
Analysts
6
Words
8,465
FY27 net retention rate
106%vs 105% expectations
FY27 billings guidance increase
More than $20 millionraised since initial guidance
RPO recognized next 12 months
~55%
Annualized full churn rate
3%remained unchanged
Q2 billings growth
17% year over year16% constant currency
Q2 RPO growth
15% year over year17% constant currency

Summary

Management framed the quarter as validation of Enterprise Advanced, with AI governance, legacy migrations, and consumption expanding Box’s platform opportunity.

  • 106%106% net retention exceeded expectations, driven by seat expansion and stronger Enterprise Advanced retention.
  • More legacy migration deals now combine replatforming with agentic workflow deployments, strengthening the second-half pipeline.
  • Billings outperformance raised full-year expectations, while quarterly variability obscures underlying demand momentum.
  • Cloud-provider capacity constraints delayed planned infrastructure efficiency gains, tempering gross-margin expectations.

Guidance

  • 106%FY27 net retention rate 106%, raised from 105% expectations
  • $20MFY27 billings expectations raised by more than $20 million
  • 55%~55% of RPO recognized over the next 12 months

What analysts pressed on

  • 01Token costs and open-source models: model neutrality should optimize accuracy and cost as workloads become more consumption-intensive.
  • 02Legacy migrations: AI accessibility is accelerating replatforming, with additional migration-enabling product launches planned.
  • 03Agent governance: new guardrails, monitoring, anomaly detection, and identity controls extend human security capabilities.
  • 04Gross margins: AI usage and constrained public-cloud infrastructure capacity are reducing expected efficiency gains.
  • 05AI consumption: initial workloads dominate today, with existing customers generating materially larger upsells rather than only credit refills.
  • 06Billings seasonality: quarterly lumpiness reflects FX and comparisons, while management expects constant-currency billings growth ahead of revenue.

Notable disclosures

  • Multiple Q2 deals combined legacy ECM migration with agentic workflow deployments, rather than selling migration separately.
  • Enterprise Advanced retention exceeded overall company retention, supporting management’s seat-expansion thesis.
  • FDE engagements may revisit customer deployments repeatedly as new models improve, creating an ongoing services and optimization motion.
  • Management expects agentic workloads to increase model switching, making cost-performance optimization a core platform value proposition.
  • Anthropic’s lack of zero-data-retention support was identified as an adoption barrier, though management expects its stance to evolve.

Risks raised

  • Public-cloud infrastructure capacity constraints are limiting planned infrastructure efficiency projects and pressuring gross-margin expectations.
  • Token-intensive agentic workflows increase customer sensitivity to model costs and require continuous model optimization.
  • AI-agent access creates larger potential data blast radii than human users, increasing governance and anomaly-detection requirements.
  • Quarterly billings remain inherently lumpy because of FX, comparisons, and deal timing.

Tone: Confident 0.82

The tone was strongly positive, supported by raised expectations and accelerating adoption, despite cloud-capacity constraints affecting gross-margin efficiency.

Who spoke

Company

  • Cynthia HiponiaInvestor Relations
  • Aaron LevieChief Executive Officer
  • Dylan SmithChief Financial Officer

Analysts

  • George KurosawaAnalyst, Citi
  • Chris QuinteroAnalyst, Morgan Stanley
  • Johnathan MccaryAnalyst, Raymond James
  • Jason AderAnalyst, William Blair
  • Lucky SchreinerAnalyst, DA Davidson
  • Unidentified AnalystAnalyst, Bank of America

Full transcript

Analyst questions are marked with a bar. Timestamps are into the recording.

Prepared remarks

00:05

Cynthia HiponiaInvestor Relations

Good afternoon and welcome to box the second quarter fiscal 2027 earnings conference call. I'm Cynthia upon you vice president investor relations on the call today. We have Aaron Levy box co founder and CEO and Dylan Smith box co founder and CFO following our prepared remarks. We will take your questions. Today's calls being webcast and will also be available for replay on our website. A couple of mental slides are now available on the website on this call. We will be making forward looking statements, including our third quarter and full fiscal year 2027 financial guidance and our expectations regarding our financial performance for fiscal 2027 and future period, including gross margins, operating margins, operating leverage, future profitability, net retention rates, remaining performance applications, revenue and billings, and the impact of foreign currency exchange rates, and our expectations regarding the size of our market opportunity, including the growing opportunity driven by the increasing role of unstructured data and AI agents in the enterprise.

Our plan investments future product offerings go to market initiatives and growth strategies, the timing and market adoption of and benefits from our new products solutions and pricing model. Our ability to address enterprise challenges, including enabling organizations to automate critical workloads and deliver value for our customers. The benefits from our deep greening partnerships with leading AI labs, hyperscalers and systems integrators and our capital allocation strategies, including potential repurchase of our common stock and future share account reductions.

These statements reflect our best judgment based on factors currently known to us and actual events or results may differ materially. Please refer to our earnings press release file today and the risk factors and documents that we file with the FCC, including our most recent quarterly report on Form 10 Q for information on risks and uncertainties. They may cause actual results to differ materially from statements made on the earnings call.

These forward looking statements are being made as of today, August 25th, 2026, and we disclaim any obligation to update or revise them. Should they change or cease to be up to date? In addition, during today's call, we will discuss non-GAP financial measures. These non-GAP financial measures should be considered in addition to and not as in substitute for or in isolation from our GAP results.

You will find additional disclosures regarding these non-GAP measures, including reconciliation with comparable GAP results in our earnings press release and in the supplemental slides, which can be found on the investor relations page of our website. Unless otherwise indicated, all references to financial measures are on a non-GAP basis.

Finally, please see our earnings deck posted on our IR website for a more detailed look at our Q3 and full year 27 guidance.

Thank you. With that, let me turn the call over to Aaron.

03:06

Aaron LevieChief Executive Officer

Thanks, Cynthia, and thank you all for joining the call today. Box delivered exceptional second quarter results, continuing the strong momentum we saw on Q1 and led by the rapid customer adoption of enterprise advanced. Second quarter revenue exceeded our guidance growing 9% year over year or 11% in concurrency and produced operating margins of 29%. We drove a net retention rate of 106% ahead of our expectations of 105%, driven by both price per seat increases and seat expansion.

Our Q2 buildings growth of 17% year over year and RPO growth of 15% year over year reflect the success of our strategic investments in both go to market and product roadmap in delivering solutions to customers that address their most critical challenges in AI. Some examples of our enterprise advanced wins in the quarter included a leading multinational investment bank that upgraded from enterprise plus to enterprise advanced, transitioning its legacy file servers to the box platform. This deployment will expand its license to a wall-to-wall agreement to deliver unstructured data insights across its global banking teams.

Next, a major federal agency upgraded from enterprise plus to enterprise advanced with a 4x seat expansion to replace its legacy contract lifecycle management and collaboration platforms. In partnership with Salesforce, Box will power secure cloud-based CLM and document management across key legal and research divisions, replacing multiple SaaS vendors. This agency-wide modernization is enabled by Box's FedRAMP high compliance, our secure identity verified e-signatures, and enterprise advanced capabilities.

With record Q2 bookings, these wins and many others make it clear that our role in enabling enterprises to get the most out of their enterprise content and transform in the era of AI is becoming increasingly significant. During the second quarter, I spoke with many enterprise technology leaders who highlighted their primary goals and challenges in implementing AI. One of the most common topics is how enterprises can get the right context to AI agents in a secure and governed way, as well as tap into the full value of their unstructured data.

To do this, enterprises need a secure platform that can connect all the intelligence and capabilities of AI models to enterprise content and workflows. The world's most advanced superintelligence is only as useful as the underlying enterprise knowledge and corporate information that it has access to. Instead of companies sitting on millions or hundreds of millions of files that they know very little about, with AI agents, they can now ask questions about this data, mine at all for intelligence, and automate nearly any workflow that involves this enterprise content.

This is the intelligent content management platform that we are building. These technology leaders that I'm speaking with are also recognizing that as AI model capabilities advance rapidly across an expanding set of vendors, like OpenAI, Google, Enthropic, Meta, XAI, NVIDIA, and more, that enterprises will need a model neutral platform that connects their content and workflows to these models and agents securely. With AI costs continuing to rise, the ability to draw the right cost performance mix with any vendor becomes essential.

Rather than migrating content and workflows into separate systems to unlock AI's benefits, our intelligent content management platform gives enterprise a single platform where they can swap models or agents on their content at any time securely. Now, Fox is at the center of the greatest transformation in how enterprises work, and we are continuing to drive our product and go-to-market strategies to take full advantage of this massive opportunity.

Building on our product leadership, in the second quarter, we announced a range of new capabilities that helped customers transform the value of their content with AI. We introduced new security capabilities designed to give organizations greater control over AI agents, working with their enterprise content. With new agent guardrails, third-party agent activity oversight, prompt injection detection, agent classification-based access policies, and more, customers will be able to extend Fox's enterprise-grade security controls to both Fox agents and third-party agents, such as CLOD, ChetchBT, Gemini, and more. To support our headless initiatives, Fox announced new MCP integrations with Enthropix CLOD for Legal, Databricks, Harvey, IBM's Watson X Orchestrate Agent Catalog, Notion Custom Agents, Slack Bot, and SpaceX's Grock.

Fox partnered with Enthropix as a launch partner for CLOD's new legal industry solutions using the box MCP server as the secure governance layer for agent legal work. New MCP tools now let CLOD execute multi-step matter operations directly in box, copying and uploading files, tagging metadata, and managing collaborator access, turning CLOD from a QA chatbot into an active practice agent.

All actions stay governed by the firm's existing box permissions and ethical walls avoiding the governance gap of moving sensitive client data into unsanctioned tools. Also, earlier this month, we announced the release of the box MCP server for Databricks, now available in the Databricks marketplace. This integration lets data analysts, scientists, and engineers combine, connect, and query unstructured content from box, including their contracts, clinical records, financial assets, and specifications, alongside structured sources like CRM and ERP, all without duplicating data or moving it outside of box's secure governance boundary.

This unlocks use cases across industries from healthcare teams spotting care gaps by combining clinical records with referral and billing data to financial services firms accessing borrow and covenant risk by joining loan documents with banking data. Now, as we look further into the second half of FY27, we're continuing to drive significant innovation across our platform to help enterprises maximize the value of their content in the era of AI.

Building on the momentum of box automate, box extract, and box apps, our platform is evolving into a premier agent workflow automation system designed to streamline critical content processes like client onboarding, contract reviews, brand asset verification, supply chain automation, and thousands of other workflows in an enterprise. Additionally, we're advancing box extract to help power complex document extraction needs across a range of industries from financial services to life sciences.

Our model neutral agentic harness ensures that customers can both improve the accuracy of this extraction and lower their costs by choosing exactly the right model they need for any document type. Box is also modernizing its core content management infrastructure. With improvements in metadata management, large file support and file system capabilities, we are paving the way for enterprises to retire legacy on premises ECM systems and migrate their unstructured data to a secure cloud native platform where it can be easily accessed by AI. In Q2, we've continued to see more and more enterprises look to migrate off these legacy systems in favor of a much more modern AI driven approach.

At box, we're also optimizing our developer ecosystem to support AI agents working with enterprise content at scale and introducing new tools and improvements such as enhanced MCP server support, deeper integrations with leading agents like CLOD, CHACHBT, co-pilot, and Salesforce agent force, and improved context retrieval APIs, which will allow developers to securely connect enterprise content to AI agents.

We're focused on delivering the world's best headless experiences for working with enterprise content securely across any AI agent and monetizing this usage through our AI units and API volume.

Finally, all of these innovations are anchored by Box's industry leading security and compliance foundation. As we recently saw with the OpenAI hugging face incident, enterprises will increasingly need platforms that can securely protect their corporate data and ensure that neither humans nor agents can get access to information they shouldn't have access to. As external AI agents interact with enterprise data, Box is implementing robust guardrails, comprehensive audit logs, and real-time security alerts to ensure that content remains protected, governed, and visible at all times.

We'll continue to deliver industry leading data protection and governance capabilities to ensure the security of unstructured data in an enterprise.

Now, we will be sharing much more about our product roadmap at this year's Box Works in San Francisco in early November, where we'll be making major product announcements, we'll hear directly from customers that are taking advantage of the Box platform, and hear directly from our partners, including the CEO of NVIDIA, Jensen Huang, Lip Butan, the CEO of Intel, and Michael Trul, the CEO, and founder of Cursor.

Next, for our go-to-market strategy, we remain focused on accelerating the adoption of enterprise advanced, enabling customers to power their intelligent workflows with content while driving the growth of platform revenue. To win in key industries, such as financial services, life sciences, government, education, media and entertainment, legal, and other key verticals, we will continue to deepen our vertical specific marketing, sales motions, collateral solutions, and ecosystem partnerships.

We are also expanding our FDE, or for deployed engineering efforts, to ensure that customers can successfully implement and tune AI agents on their enterprise content, for everything from document processing to agent content workflows. Additionally, we are expanding our system integrator ecosystem, collaborating with vertical, regional, and global system integrators to embed our platform deeper into enterprise's critical content workflows.

Finally, our partnerships with major hyperscalers like Amazon and Google will be central to expanding our enterprise distribution and enablement. In the second quarter, we continue to see strong momentum in customer wins enabled by these partners, a critical part of our go-to-market strategy.

These deployments leverage boxes, platform APIs, the box sign APIs, and box AI, to connect box directly into the firm's custom middleware for core systems, including Guide Wire.

This positions the insurance provider to modernize more than 100 terabytes of content, retire multiple legacy platforms, and integrate box AI across high volume workflows, like mailroom and policy processing. Working with Slalom, a large U. S. state DMV upgraded from enterprise plus to enterprise advanced and purchased additional AI units as the foundation for a new intelligent document processing initiative.

This agency is replacing a costly legacy document processing system with classification and metadata extraction powered by box AI. The solution will extract key information from identity documented scale and automatically populate sales source records associated with each driver profile, streamline licensing applications and renewals across the state.

At box, we have an extraordinary opportunity to serve as the defining platform for securing, managing, governing, and applying intelligence to unstructured enterprise data at scale. Nearly all mission critical workflows, such as processing regulatory data, automating insurance claims with AI, reviewing legal contracts, managing aviation research, or facilitating collaboration and pharma, are all fundamentally powered by enterprise content. Our intelligent content management platform sits squarely at the center of these vital business processes.

We're incredibly excited at box about the market transformation happening right now due to AI, and we have the team, the technology, and the customer base to fundamentally take advantage of this massive opportunity.

Now, let me turn the call over to Dylan.

16:13

Dylan SmithChief Financial Officer

Thanks, Aaron, and good afternoon, everyone. We had another very strong quarter in Q2, driven by record Q2 bookings and increasing box AI adoption. As a result, we exceeded guidance across all top and bottom line results, delivering our fifth consecutive quarter of accelerating revenue growth in constant currency. As Aaron discussed, we advanced our leading intelligent content management platform by deepening our AI and agenda capabilities, while investing in key go-to-market initiatives to drive continued enterprise advanced momentum.

Q2 revenue of 321 million was up 9% year over year and up 11% in constant currency, exceeding our guidance.

Customers paying us at least $100,000 annually grew by 10% year over year. In 1.7 billion, a 15% year over year increase or 17% in constant currency.

Both short term and long term RPO accelerated sequentially, with short term RPO up 11% year over year and up 14% in constant currency. We expect to recognize roughly 55% of our RPO over the next 12 months.

Q2 billings of 310 million were very strong, growing by 17% year over year or 16% in constant currency. This result exceeded our expectations for low double digit growth, with the outperformance driven primarily by Q2 booking strength. In Q2, our net retention rate improved to 106% above our guidance of 105% and up from 103% in the year ago period.

Our annualized full churn rate remained at 3%. This outperformance was driven by continued improvement in our seed expansion rate, as well as the impact of very strong net retention results within our enterprise advanced customer base, which exceeded our overall net retention rate. We now expect our net retention rate to be 106% exiting FY27.

We delivered Q2 gross margin of 81.2% in line with our expectations. Operating income of 95 million resulted in operating margin expansion of 90 basis points from the year ago period to 29.4%, which reflects a 100 basis point headwind from FX. This was above our guidance of 28.5%. In Q2, we delivered EPS of 40 cents, which was above our guidance of 39 cents.

This includes an FX headwind of 4 cents, one cent higher than our prior expectations, turning to our cash flow and balance sheet. In Q2, we generated free cash flow of 60 million and cash flow from operations of 71 million, up 67% and 54% year over year respectively.

These results were driven by strong linearity, allowing us to collect a healthy portion of our Q2 bookings within the quarter. We ended Q2 with 446 million in cash, cash equivalents, restricted cash and short-term investments.

In Q2, we repurchased 2.6 million shares for approximately $66 million. As of July 31, 2026, we had approximately 378 million of remaining buyback capacity under our current share repurchase plan.

With that, let me now turn to our Q3 and updated FY2027 guidance. Note that our second half expenses will be more weighted toward Q4 versus our typical seasonality due to the expected impacts from box works occurring in Q4 this year, as well as the recent extension of our Redwood City headquarters lease. For the third quarter of fiscal 2027, we expect Q3 revenue to be approximately 329 million, representing approximately 9% year over year growth for 11% in constant currency. We anticipate our Q3 billings growth rate to be roughly in line with revenue growth of 9%, which includes an expected tailwind from FX of approximately 70 basis points.

We expect Q3 gross margin to be approximately 80.5%. We anticipate Q3 operating margin to be approximately 28%, which includes an expected headwind from FX of approximately 80 basis points.

We expect Q3 EPS to be approximately 39 cents, which includes an expected headwind from FX of approximately 2 cents.

Weighted average diluted shares are expected to be approximately 142 million. For the full fiscal year ending January 31st, 2027, we are raising our revenue expectations for the full year by 10 million to approximately 1.29 billion representing 10% year over year growth or 11% in constant currency. We expect our FY27 billings growth to be roughly in line with revenue growth.

This includes an expected headwind of approximately 150 basis points from FX. We expect FY27 gross margin to be approximately 80.5%, with Q4 gross margin expected to be roughly 80%. This reflects the strong and growing adoption of boxes platform and box AI, as well as the capacity dynamics of our public cloud providers.

We continue to expect FY27 operating margin to be approximately 28%, which includes an expected headwind from FX of 80 basis points. This reflects our ongoing focus on delivering operational efficiencies even as we continue to invest in driving durable revenue growth.

We now expect FY27 EPS of approximately $1.54, which includes an expected headwind from FX of approximately 9 cents. Adjusting for the impact of the currency and share count movements versus our previous expectations, this represents an increase of 1 cent versus our prior guidance.

Weighted average diluted shares are expected to be approximately 141 million. This represents a significant reduction from 149 million shares in the prior year as we continue to execute our disciplined capital allocation strategies. The $10 million raised to our revenue expectations this year reflects continued momentum across the business with demand for box AI and the growing adoption of enterprise advanced driving continued acceleration in our revenue growth rate and continued improvements in our net retention rate. As boxes intelligent content management platform is increasingly becoming the foundation enterprises rely on to securely unlock AI's value across their content box as well positioned to drive durable long term growth.

With that, Aaron and I will be happy to take your questions.

Questions and answers

24:41

Operator. We will now begin the question and answer session. If you would like to ask a question, please press star 1 to raise your hand. To withdraw your question, press star 1 again. We ask that you pick up your handset when asking a question to allow for optimum sound quality. If you are muted locally, please remember to unmute your device. Please stand by while we compile the Q&A roster.

25:20

Lucky SchreinerAnalyst, DA Davidson

Your first question comes from the line of Lucky Shriner with DA Davidson. Your line is open. Please go ahead.

Great. Thanks for taking my question. Aaron, I thought it was really interesting to hear about your expectations for innovation in the back half of the year and I wanted to follow up on that. The longer agentic workflows tend to be more token intensive. Can you give us an update on how you view token cost evolving here and how open source model adoption factors into customers implementing some of those longer form workflows and maybe sneak in like any difference in unit economics between a frontier model versus open source for you guys internally. Thanks.

26:07

Aaron LevieChief Executive Officer

Yeah, so you're exactly right. The kind of momentum we're seeing generally correlates to, interestingly, two dimensions, either one longer running agents that do more processing work in a single session or the ability to run agents off of large amounts of data, which can be broken up, you know, kind of discreetly on a per item or per document basis, both of which have the exact same type of tendency to be very token intensive, very consumption heavy, which is both, you know, great for us.

I mean, basically on every dimension because it means that customers will increasingly want those types of workflows to happen inside of platforms that are model neutral because the more tokens your use case requires, the more obviously over time you're going to be price sensitive because you want to make sure that you're optimizing that cost structure for the use case. So by having a model neutral layer, which is our agentic harness, we can then make sure that we are directing the workload to whatever is the effectively cheapest model at the accuracy level that the customer is looking for.

In some cases, that can be an open weights model and we have some, there's models on the horizon that we're quite excited about that will be opening up, you know, we assume in the second half based on some of the visibility we have from partners. In other cases, it can be just the sheer competition that's happening between the labs. You've seen things like OpenAI bringing down their prices or Gemini bringing down its prices.

That actually also flows into our product as more either margin or relief or more consumption from customers. But in general, again, the trend that we're going to continue to see is customers are going to say I have millions, tens of millions, hundreds of millions of documents. I want to be able to run agentic workflows on these documents to automate processes or extract intelligence from data or be able to use all of this information as critical knowledge for my organization.

And then our layer is really in the best position to both again deliver the highest level of accuracy at the cost profile that our customers are looking for. And even Box is a headless platform performs well in that environment as well. So these are all great trends for us.

Awesome. Last one from me, you know, it's interesting to hear about the legacy migrations. Can you give us a sense like those tend to be long and painful processes? Obviously your partnerships improve that, but maybe like how have you been able to speed up that process? I imagine Box shuttle and AI capabilities in general help you out there. And what's the customer demand to go through that kind of painful modernization process today? Thanks. Yeah, you know, it's interesting. So we've obviously talked about this a bit over the past couple of years. I think it started out as something that we assumed and kind of could feel would happen, but it was still very early in the trajectory.

Now we're actually seeing, you know, example after example on the rise, which is if you're an enterprise and you still have a large amount of your unstructured data in legacy systems or on premises environments, your contracts, your research files, your insurance claim data, your loan processing documents, your KYC documents, your agency documents and a government agency. All of that data is often sort of effectively trapped and closed off from AI agents. So as you have an AI strategy that assumes that an agent is going to read a document or process a claim or look through a contract or be able to process an image for brand guideline failures, all of that data needs to be available and accessible to AI agents in secure ways in these workflows.

And so many of the legacy approaches to doing document management or enterprise content management just simply don't work as companies are modernizing how they're going to work with and automate their enterprise content workflows. So that's leading to this catalyst of more and more customers reaching out to us calling us and then obviously going out into their environments for either large scale migrations or really kind of replatforming their next generation of these workflows. We had a number of deals in Q2 that kind of represent this combination of very much agentic workflow-driven use cases that have a data migration or a legacy ECM system migration as a part of where the dollars are going to come from.

So on the horizon we actually see quite a bit of this opportunity continuing to grow. And so in the second half and certainly as we go into next year, you'll see a continued amount of product launches and updates that help facilitate and accelerate that migration, all of which are these next generation features that help customers manage their content in the cloud at scale in these business processes and be able to bring AI agents to that content very seamlessly and securely.

Fantastic. Thanks for taking my questions and congrats on a phenomenal quarter. Thank you.

31:26

Your next question comes to the line of George Kurasawa with Citi. Your line is open. Please go ahead.

31:33

George KurosawaAnalyst, Citi

Okay, great. Thanks for taking the questions. I'm on for Steve Enders. Maybe just a question on the security role that box plays within these agentic workflows. If you could talk about the governance and security side, what is maybe new or different in terms of enterprises' needs in an agentic world versus dealing with human users?

31:51

Aaron LevieChief Executive Officer

How is box's role there evolved? Yeah, this is an area of an incredible amount of surface area, which is very exciting for us. Obviously, it's an incredibly dynamic and sometimes kind of stressful space for the customer ecosystem, but there's a lot of innovation really available here. If you think about what agents tend to need, not only do they need basically all of the same level of security and controls that humans need, so they need access levels, they need to be only able to view or edit the documents that you want them to. You need to be able to obviously be alerted if they're either going rogue or you're seeing too much usage happen. So that's kind of the basic foundation that we're drafting off of in the core of box's security and access control capabilities, which is why we're in a very strong position to take a lot of these workloads.

But what's interesting is over time they're actually going to need additional protections that we didn't commonly think that end users needed.

A human user could really only process a certain amount of data at scale, and so you could quickly kind of detect if maybe a user was doing something that they shouldn't be or they'd be very limited kind of blast radius or damage that they could do if they kind of went rogue or if there's some malicious actor in the system. Whereas AI agents have the ability effectively with just kind of just correlated to their compute level to be able to either work with large amounts of data, access the wrong information, in the case of the hugging face or open AI, very much go out and execute on a goal to the kind of ultimate level that its compute is allowing.

And so what that means is that enterprises are going to need an all new set of guardrails, alerting mechanisms, anomaly detection capabilities, ways of really having a better set of controls on what agents can do with their data. And that could be things like, okay, agents inside of these folders or these usage levels shouldn't be able to write data or shouldn't be able to download data. They can only kind of view it or we need to be able to monitor their activity or we need to be alerted after a certain threshold of activity happens under certain kinds of agents. And maybe we don't want to let these kinds of agents into our systems, but we're fine to let those other agents in the system.

So all of that functionality is effectively kind of net new for the agentic era. But what it's all built on is the same foundation and capabilities that we've been working on for a number of years. So Shield, for instance, which is our advanced threat detection and security product from Box, we're going to continue to build out more and more features that help our customers protect this data that both again let them protect human users and agentic users in the system.

There's new forms of identity controls that we need to be building out that we're excited to share more about over the coming quarters. We obviously are going to continue to integrate with the broader security ecosystem to help protect enterprise data. But these are all things that continue to reinforce our value proposition and reinforce the need for secure, very, very robust systems of record on data. This is kind of why, you know, maybe the first part of this year when there was a lot of commentary on maybe people will just vibe code different kinds of applications.

To us it was a little bit kind of humorous just because we know the level of security and protection that is necessary for these enterprise systems. And I think as people saw the opening eye hugging face incident it kind of made it more resonating what's really possible out there from a security risk standpoint. So we take our position very seriously. We're going to be doubling down in all of our security investments and make sure that we are the best platform for helping customers protect all of the sun structure data.

Okay, that's a great color.

36:07

Dylan SmithChief Financial Officer

And then maybe one for Dylan, you referenced a couple of different dynamics on the gross margin side, AI usage and then capacity on the public cloud providers. We could just double click. What are some of the moving pieces there? How should we think about that going forward?

Yeah, so as noted, really the two biggest drivers are the kind of strong and growing adoption of boxes, platform, box AI specifically, as well as the capacity dynamics with our public cloud providers.

To double click a bit, you know, really number one we're really pleased with especially the new features. A lot of the, you know, kind of heavier workloads and kind of ejectic processes that Aaron mentioned are certainly, you know, kind of a quickly growing and that new, you know, type of use case that customers use in the platform for. And then on the capacity dynamics that's really related to, you know, kind of limited access to certain components of the infrastructure just given what's going on in the environment. And that really has an impact on the kind of level and impact of the infrastructure efficiencies that we expect to deliver this year. So, you know, certainly as those constrain fees, we'll continue to unlock those efficiency projects.

But those are, you know, some of the things that we're seeing that are impacting gross margin versus our initial expectations entering the year.

37:38

Your next question comes from the line of Matt Bullock with Bank of America. Your line is open. Please go ahead.

37:44

Unidentified AnalystAnalyst, Bank of America

Hi. Yeah. There's a drink of media and on for Matt Bullock, thanks for taking the question. I think we're hearing kind of more and more about kind of enterprises going wall to wall. You mentioned a few on the call today. Could you talk specifically about how kind of the AI governance or agent governance opportunity is like driving this?

Why, you know, why is there a benefit to going wall to wall rather than just having blocks maybe within a certain department when it comes to like embedding, you know, AI workflows?

38:17

Aaron LevieChief Executive Officer

Thanks. Yeah. Definitely, you know, we've had some great wall-to-wall wins. I would say we're in a position where we can both capture the individual line of business use case that a customer is trying to automate or be able to bring AI to as well as the wall-to-wall motion. So I think actually both motions are, you know, humming at the moment. But to your point, the wall-to-wall benefits for a customer are really, you know, imagine a scenario where you have rolled out a variety of AI agents to your enterprise. Maybe some people are using Chatsby-T, other users are using cloud co-work.

Maybe your developers are using cursor. Your sales force has sales force agent force. Now all of those agents are running around. They need access to corporate information to be able to make decisions or be able to work with your information. So that could be your research materials, your marketing assets, your HR documents, your contracts.

The challenge is if you have three or five or ten different systems where all of those agents all have to be able to work with and equally use successfully and you have, you know, to be able to secure the access controls to all that data, it's just a very, very difficult problem. It's a many-to-many relationship problem. And that's, you know, generally not a clean architecture for most enterprises.

So what you're going to see is a consistent pattern across various data planes where how do we move our canonical, you know, data in different topics into sources of truth. So you've seen that in the structured data world with things like Databricks or Snowflake. We're seeing these kind of mass migration projects. You've obviously, over the years, seen that in ERP systems or CRM systems.

But we also think there's quite a bit of momentum on the same for unstructured data. So you'll go to an enterprise and they'll say, hey, I want to be able to have all these agents, you know, have access to corporate knowledge that, again, is we need to make sure that those agents are working off of the real source of truth, the authoritative copy of data, which means that you can't have a fragmented landscape that everybody's working from. So that's one of the core wall-to-wall benefits. That's the kind of like knowledge worker end user productivity benefit. There's also security benefits. There's governance benefits.

We've been building a lot of features in enterprise advance that help you with things like data retention, data archival. We have new capabilities around records management that we're excited to share in the next couple of quarters. But all of that is really around the need for robust infrastructure that helps you manage all that enterprise content, which is really the context for those agents.

40:55

Dylan SmithChief Financial Officer

Yeah, and the only idea that this is doing is as we talked about our confidence as we launch it in enterprise advanced, also being a potential catalyst for seed expansion because of the capabilities that it enables and the types of workflows that customers can now do using those capabilities, a lot of those are really cross-departmental, right? So if you think about whether it's a sales enablement workflow, or a contract lifecycle management workflow, or something like that, yeah, there might be a primary business unit who's really driving it, championing it, but that might go across four, five, six different departments.

And if they don't have access to box, they're going to run into all the challenges that Aaron was mentioning. And that's why we've seen. I mean, you look at the increase in our net retention rate and those trends, the biggest driver of that has been higher seed expansion for exactly that reason. That's great. Thanks for taking the question, guys. Appreciate it.

41:56

Your next question comes to the line of Chris Quintero with Morgan Stanley. Your line is open. Please go ahead.

42:05

Chris QuinteroAnalyst, Morgan Stanley

Hey, guys. We're at some of the nice acceleration here across the board. Aaron, maybe for you kind of high level, we've been hearing a lot about zero data retention as a key enabler for AI growth and compliance. And we've seen how some of the recent models have implemented some potential changes around that. So, curious how you're thinking about that from the box perspective and what's the opportunity there for you all?

42:32

Aaron LevieChief Executive Officer

Yeah, so this is obviously a very hot topic at the moment, mostly driven by the release of Fable. In general, maybe one of the underappreciated reasons for the rapid rise of AI growth is the fact that very quickly most of the leading labs coalesced around the idea of zero data retention, which basically in simplest terms means that when I'm interacting with an AI model and I have information in the context window, that data doesn't sort of get stored and sit around for a week or 30 days in the servers of those AI labs. It's sort of just kind of a femoral pass through. And that's what led to enterprises being very comfortable with the adoption of AI in their organizations, whether that was direct adoption or through more of these kind of applied AI layers, like a box or a Harvey or Sierra, Deccagon, et cetera.

And so the challenge obviously with something like Fable was they launched without zero data retention, which obviously means that then there can be less adoption. You have to have kind of separate exception handling that customers have to go through. And we've made it very clear in our platform that the sort of in-production GA, generally available models, will have a set of criteria that are met around zero data retention, certain compliance requirements, ways that the infrastructure is hosted, being able to have certain reasons that it all operates in, and that's the enterprise trust that we've been able to establish with organizations as we deliver AI to them. And that's, again, where I think you're going to see a huge benefit to this applied AI layer, is being able to really sort of bridge the breakthroughs of AI models with the actual real enterprise workflows that need compliance, they need guardrails, they need security, they need governance, they need these kind of regulatory controls.

So that's kind of the state of the industry. My guess realistically is actually just the anthropic will evolve their stance on this because they'll see it in the revenue and they'll have to change course. And I think we'll just see more and more modern approaches to how these companies will both meet their safety, internal kind of AI safety requirements with offering things that kind of technically resembles ZDR for their users.

Very helpful.

44:56

Chris QuinteroAnalyst, Morgan Stanley

And then great to hear about the FDE motion, the expansion you're putting through there. So, curious, what are some of the key learnings you've had on that whole motion as you've now kind of ramped it up and grown over the past few months?

45:10

Aaron LevieChief Executive Officer

Yeah, so this is a pretty exciting area because if you kind of think about the types of challenges, workflows, goals that customers have when working with enterprise content and unstructured data in agents, let's say you're a bank, let's say you're a pharma company, let's say you're an insurance provider, you're seeing all of this potential with AI. And certainly in your internal use cases, things like coding agents, et cetera, are showing incredible breakthroughs and productivity gains.

But the rest of your organization, the back office processes, the customer facing workflows, you're trying to figure out how do I actually get these same AI gains in those parts of the business. And some of that's a data challenge, some of that's an architecture challenge, some of that's an information governance challenge, all of which, obviously, box is very, very expert in. But a lot of times it's also, how do I tune these agents?

How do I pick the right model? How do I run e-vals against my data and compare what model is the best to use for certain types of workflows or certain kinds of document processing tasks? And so, box from just a talent standpoint, a brand standpoint, a technology standpoint, I think best represents being able to help customers go through that journey. And so, the FDE motion really kind of originated by us effectively doing that with a number of our individuals across our consulting team and our solutions engineering team. So we've been increasingly more programatizing that and scaling that across customers. I think this is going to continue to be an investment area for us, both for the rest of this year and certainly next year.

And again, in essence, it's really about helping our customers transform with AI, making sure that they can actually get the data environment set up in the way that they need, making sure that they understand how to do the right types of evaluations of AI models and agents on their documents, continue to kind of tune these workflows. There's been some engagements we've worked on with customers where we've gone back maybe nearly a half a dozen times because there's been a new model breakthrough, and we want to introduce that into the customer's environment and make sure that they can get those either productivity gains or cost savings as a result of that. And that really, again, requires a high degree of technical expertise on the side of both the vendor and the customer, which is why you're seeing this big push on FDEs right now.

Excellent. Thank you so much.

47:44

Your next question comes from the line of Brian Peterson with Raymond James Company. Your line is open, please go ahead.

47:52

Johnathan MccaryAnalyst, Raymond James

Hi guys, thanks for taking the question. This is Jonathan McCarry on for Brian. I'll ask one, just multi-parter. Aaron, I realize it's early days, but I wanted to ask one of the consumption trends. It sounds like that's ramping nicely. How much of the traction there is customers that are seeing enough success to actually come back and refill the tank, so to speak, on credits prior to renewal?

And then, relatedly, is the ramping teacher adoption now on the AI platform, predominantly from existing customers? Or are we at a stage where that's actually driving material competitive wins on the net news side as well? Thanks guys.

48:23

Aaron LevieChief Executive Officer

Yeah, great question. So consumption is obviously off of a lower base than many other parts of the business, but has been growing, I think, quite rapidly, especially kind of on a year-over-year standpoint in Q2, we saw really nice wins on the growth side. A lot of it is a customer still doing their initial big growth workloads just because we're still relatively early in the AI unit monetization.

And then by virtue of just the scale of our existing customer base, a lot of it is from existing customers, but what's interesting is that that is often leading to materially bigger upsells on those existing customers. So it's a little bit, you know, might be even incidental in some cases that it's an existing account because the new transaction is so different or bigger because of the new use case that they have with us. So we're seeing really great opportunities across the board where customers are saying, hey, you know, I thought of you as a place where I put my documents or I put my content. Now it's a place where actually I can run the workflow and intelligent workflow on you, which is really changing the calculus of the conversation.

And, you know, I was in a conversation just literally three days ago with a customer that has been at box probably nearly a decade. And the moment we showed them our Agentic workflow automation tool, it like completely changed the type of conversation we were having. And this is a customer that theoretically could have already known about all of those use cases and capabilities, but we caught them in it when they were at a juncture of a new set of use cases that they need around their documents and document processing. And that will absolutely kind of turn into now another sales motion where we go and work with that customer to expand what they're doing with box.

So that's kind of how it's working every single day right now across our customer base. And what that's leading to is almost back to the last question, you know, more on the FDE front, more on the verticalization piece, more with system integrators, all of which we're seeing great success in from a go-to-market investment standpoint.

Thanks, Aaron. Appreciate it.

50:34

Our next question comes from Joshua Troutman with RBC Capital Markets. Your line is open. Please go ahead.

50:42

Unidentified AnalystAnalyst

Hi, team. This is Joshua Troutman on Perissi, Deloria. Congrats on the quarter. You guys have mentioned strong product adoption and some different tailwinds to retention. And I was just curious around how international deals have helped to participate in that and how those conversations with those clients have been developing. Thank you. Yeah, great.

51:04

Aaron LevieChief Executive Officer

For us, it was a broad-based quarter. So we're quite happy with the results. We had, you know, great wins in Japan, some of the leading enterprises out there that, you know, were hopeful we'll be able to announce relatively soon some of those big wins, some great wins in AMEA. So we got great traction and participation from AMEA. And then obviously, you know, US business across everything from public sector, US enterprise, commercial, great momentum, all of which very similar contours of conversation around how do you transform with AI agents? I was out in Japan in the beginning of June, and just overwhelming excitement around how do you bring more automation to your enterprise content with the power of AI agents?

But again, those are very similar to the conversations that we're having here in the US and those that we're having in Europe.

Awesome. Thank you.

52:08

Your next question comes from the line of Jason Adler with William Blair. Your line is open. Please go ahead.

52:16

Jason AderAnalyst, William Blair

Yeah, thank you. Good afternoon, guys. I wanted to ask about Billings very strong in Q2. Billing for Q3, I think you got it to 8%. Can you help us understand if there's some seasonality there?

52:30

Dylan SmithChief Financial Officer

Why this step down from Q2 to Q3? Sure. So, you know, a lot of moving pieces in there and Billings is inherently lumpy. And if you look back to, you know, even entering the year, that's kind of the dynamic that we had expected, which is a combination of, you know, very different, everything from very different kind of FX impacts, quarter to quarter to, you know, kind of ease or difficulty of some of the comps.

So, I would say, you know, if you think about the full year Billings outcome, you know, even since our initial guidance six months ago, you know, we've raised those expectations pretty significantly, more than $20 million, and showing a strong acceleration from where we were last year. And so, we'd really think about it as that dynamic as, you know, not at all indicative of the change that we're seeing and the demand and momentum in the business as the underlying, you know, kind of leading indicators of that growth and bookings remain very healthy from, you know, pipeline to enterprise, advanced adoption to, you know, RPO and NRR are in that retention rate, both moving in the right direction.

So, really a function of, you know, it's just some of the variability quarter to quarter, as well as, you know, the fact that as always we want to be, you know, thoughtful and prudent about how we guide, you know, I mean, even looking back to, you know, this year so far, you know, we've had pretty significant, you know, outperformance against the guidance that we set up, and, you know, hopefully that, that trend continues, but just really wanted to be, you know, kind of thoughtful about that.

54:09

Jason AderAnalyst, William Blair

Okay, and for the year, I think you said Billings' growth and revenue growth about the same, wouldn't, I guess it would seem to me, given the momentum you have that Billings' growth would be ahead of revenue growth, just because it's more of a leading indicator, can you just help reconcile that?

54:31

Dylan SmithChief Financial Officer

Yeah, I mean, I would say, I mean, do you expect to be ahead on a constant currency basis as there is more of an FX impact to Billings than revenue, and we did give the revenue, you know, as we're talking about growing roughly the same rate, that's on an as reported basis, but again, some of it is just, you know, kind of the way that we think about setting expectations and there's, you know, you'd imagine more variability in Billings plus, you know, just some of the dynamics around compares that didn't show up in the same way as revenue. So I would say, you know, kind of other factors outside of the underlying momentum are impacting each of those metrics a little bit differently, but to your point, you know, we do expect Billings' growth to be a, you know, leading indicator of revenue to be ahead of it if we keep up the momentum that we've been on, and I think you see that type of dynamic, you know, for example, in our short-term RPO growth, which is both, you know, a few points ahead of either of those metrics and, you know, kind of moving in the right direction and accelerating.

Okay, thank you, good luck. Thanks.

55:47

We've reached the end of the Q&A. I will now pass the call off to Cynthia Haponia for closing remarks.

55:56

Cynthia HiponiaInvestor Relations

Great. Thank you, everyone, for joining us again this afternoon. As Erin mentioned, we're hosting boxworks in San Francisco on November 5th, and we'll be once again doing another investor relations product briefing at the event. So look forward to giving you more details, and we'll talk to you on our next earnings call. Thank you.

Done reading? Open Box with the chart, filings, and estimates next to this call.

About this transcript

The summary, guidance, analyst focus, and tone are automated and should be checked against the call before being relied on. Names and figures can be misheard. Listen to the replay.