...
While all Box applications are enabled and made available for users to useyou, many third party applications for Box are not compliant with the University's security policies. These applications may transfer data outside of Box and onto application servers managed by companies with whom the University does not have a contract in place to protect the data. These third party servers may not be securely configured or managed. The University's contract with Box does not extend to any other companies or their Box applications. Hence, all third party applications not explicitly approved for Category I data above may only be used with Category III data.
...