Databox

Facts

Domain

databox.com

Category

Productivity

Risk level

Moderate

Home country

Estados Unidos

Does the free version train on your data?

The vendor does not say whether your data is used to train models. (source)

Home country is the headquarters of the company behind the tool. It is not a claim about where data is processed or stored — data residency depends on the plan you hold and must be confirmed with the vendor.

Why Databox is classified as moderate risk

Moderate-risk tool. Check compliance with the company's AI policy and classify it appropriately.

What to do about it

Approval conditional on classification. The risk is not in the tool itself, but in the data that goes into it. Classify it as allowed, restricted or prohibited in your policy, communicate that to employees and keep the record — that is what LGPD and ISO 42001 ask for as evidence.

Here is the distinction almost every company gets wrong in its first audit: no framework — LGPD, ISO 42001, the EU AI Act — requires you to block AI tools. All of them require you to know what is in use and to have made a conscious, recorded decision about each item. A high-risk tool approved under a written policy is compliance; a low-risk tool in use with nobody aware of it is an audit finding.