Box + Data Alias: Save the protected copy as a new file in your Box
Why use Box with Data Alias
When the finished, protected file belongs in company storage, Box is often where it goes. This saves it there without a download and re-upload.
How it works
Box needs a secret to complete sign-in, so that one step goes through a Data Alias relay: it exchanges a one-time code for an access token and discards the refresh token. Everything after that — finding or creating a Data Alias folder and uploading the file — runs from your browser straight to Box, and the upload refuses to overwrite.
What it does
- Save the protected copy as a new CSV or TXT file
- Find or create a Data Alias folder in your Box
- Recognise an earlier upload after a lost answer, instead of writing a second file
- Refuse to overwrite an existing file
How it will connect
These are the steps once the connection is available. Until then: Download the safe copy from Data Alias and upload it to Box yourself.
- 1
Connect
Before you connect, Data Alias tells you that Box's approval is app-wide — broader than the create-only calls it makes.
- 2
Review in your browser
Detection, your rules and the review before export run in the tab, the same as for an uploaded file. Change any suggestion you disagree with.
- 3
Save as a new file
The protected copy is uploaded into the Data Alias folder from your browser.
What moves where
- What reaches Data Alias servers
- Only the one-time sign-in code, exchanged for a token. No file content.
- What is written to Box
- A new file in the Data Alias folder.
- Never sent
- The original file, the alias mapping, and restored results with real names never leave your browser.
- Who holds the access token
- Your browser tab, in memory only. The refresh token is discarded on our server and never returned.
Limits worth knowing
- Box has no per-file write permission, so the approval you give is wider than what Data Alias uses.
- Importing from Box isn't built: Box has no file picker that works without a token.
Can I connect Box today?
No. The connection is built and tested against stand-ins for Box, but it hasn't been run against a real Box account, so there is nothing to connect yet. Download the safe copy from Data Alias and upload it to Box yourself.
Why does sign-in touch your server?
Box requires a client secret to exchange the sign-in code, and a secret can't live in a web page. The relay does that one exchange and nothing else — the file goes from your browser to Box.
Can I import a file from Box?
Not with this connection. Box's file picker needs a token before it opens, so import needs a folder browser that hasn't been built.
Data Alias reduces exposure risk but cannot guarantee detection of every sensitive value. Every transfer passes the same review as a download — check the result before you send it. How connected services are handled.