# Databox — Business Intelligence & Dashboards

Databox by Databox Inc. holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Databox Inc. (https://databox.com)
- Category: [Business Intelligence & Dashboards](https://whats-best.ai/software/business-intelligence.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/business-intelligence/databox
- Alternatives: https://whats-best.ai/software/business-intelligence/databox/alternatives ([markdown](https://whats-best.ai/software/business-intelligence/databox/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Databox Inc.
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Yes, per the vendor’s own page [S1]

## The panel's verdict

Databox is a KPI dashboarding service from Databox Inc. of Boston, USA. It scores highest on data connectivity, self-service and modelling, and sharing and embedding, each ranging from 6 to 7: 130-plus integrations with hourly sync on paid plans, a governed semantic layer on every plan where one metric definition with an owner and verified status feeds dashboards, reports and AI answers, and password-protected public links and interactive embeds. Dashboards and visualization scores 4 to 5: the pages document KPI tiles, a table block, 100-plus templates and TV streaming, but the bench found no public information on the chart library, drill-down, maps or pivot tables. Sovereignty scores lowest at 4, with hosting stated as the United States on AWS and a published subprocessor list giving purposes but no locations. Pricing transparency spreads widest, 5 to 7: one judge nearly computed an annual bill from published tier prices, while another could not cost a multi-tenant rollout, citing no public information on extra-user or viewer pricing and different figures on the captured pages for the Agency plan and account packs.

**Speaks for it:**
- 130-plus integrations across named business categories plus spreadsheets, direct connections to MySQL, PostgreSQL, Azure SQL and Redshift, and an ingest API for anything unlisted
- Governed semantic layer included on every plan, with each metric defined once and carrying an owner, verified status, change history and lineage
- Public links with password protection, IP limiting, date-range and filter restrictions, and revocation
- Interactive embedding of a live dashboard on websites, intranets and client portals, plus TV streaming via a 4-digit code
- SAML 2.0 single sign-on with a verified Okta app and an enforce-for-all option, two-factor authentication, and an audit trail and data lineage on all plans

**Held against it:**
- We found no public information on the chart library, drill-down, cross-filtering, maps, pivot tables or localised number formats
- Hosting is stated as the United States on AWS and we found no public information on an EU hosting option or a self-hosted edition
- Automatic user provisioning is not supported and single sign-on sits behind select subscription plans and add-ons that are not named
- Passing parameters through the embed URL is documented as not supported and we found no public information on signed per-viewer row-level filtering or an embedding SDK
- The captured pages give different figures for the Agency plan ($79/month billed annually against a stated $99/month start) and for account packs ($20/month against $25/month each), and the 15-minute sync add-on carries no published price

**Best for:**
- You want one trusted number across the company, with metrics defined once and governed on a semantic layer included on every plan, the free plan included
- You track KPIs from a broad stack of SaaS tools and want 130-plus integrations with hourly sync on paid plans
- You distribute performance widely through password-protected public links, snapshots by email or Slack, and TV streaming on office screens
- You are an agency reselling dashboards under your own brand via the white-label add-on at $250.00 per month on any plan

**Avoid if:**
- You require EU data residency or a self-hosted edition, since hosting is stated as the United States on AWS and we found no public information on a European option
- You onboard many users automatically, since provisioning is not supported and single sign-on sits behind select subscription plans and add-ons that are not named
- Your reporting depends on pivot tables, maps, drill-down and localised number formats, since the captured pages document KPI tiles, a table block and 100-plus templates and we found no public information on the chart library

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Finance Controller | The Managing Director | The Data Analyst | The IT Administrator | The SaaS Product Lead | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Data sources, connectors & refresh | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 3.5/5 |
| Dashboards, charts & interactivity | 2.5/5 | 2.5/5 | 2.5/5 | 2/5 | 2/5 | 2/5 |
| Self-service analysis & shared metrics | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Sharing, scheduled reports & embedding | 3.5/5 | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 |
| Access control, administration & portability | 3/5 | 3/5 | 2.5/5 | 2.5/5 | 3/5 | 3/5 |
| European sovereignty | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 | 2/5 |
| Pricing transparency | 3/5 | 3/5 | 3.5/5 | 3/5 | 2.5/5 | 3/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **2.5/5** | **3/5** | **3/5** |

### The judges

- **The Finance Controller** (v1.0): Head of controlling at a 250-person machine builder in Baden-Württemberg. Closes the month from DATEV, the ERP, the CRM and a dozen Excel files that colleagues still mail around, and spends two days a month copying numbers into the management report. Wants the sources connected and refreshed on a schedule, one definition of contribution margin on every page, a report that prints cleanly for the advisory board, and data that stays where the auditors expect it.
- **The Managing Director** (v1.0): Runs a 40-person service company with HubSpot, an online accounting tool, a help desk and a project management app, and no one whose job is data. Wants revenue, pipeline, utilisation and open tickets on one screen in the office and on their phone, set up in an afternoon from ready-made connectors, a weekly summary in the inbox on Monday morning, and a price that does not double when the whole team wants to look.
- **The Data Analyst** (v1.0): The first data hire at a Hamburg e-commerce scale-up, with orders, marketing spend and customer data landing in a PostgreSQL warehouse every night. Answers the same question three times a week because every department computes revenue differently. Wants a SQL editor and a query builder for colleagues, metrics defined once in a model that lives in Git, natural-language questions that show the query they ran, and a way out that does not mean rebuilding every dashboard.
- **The IT Administrator** (v1.0): IT lead at a mid-sized healthcare supplier whose reports touch customer, pricing and employee data. Is asked to approve a BI tool after a department has already started a trial. Reads where extracts and caches are stored, whether the tool reaches the ERP database through a gateway or wants it opened to the internet, whether sales sees only its own region, and whether single sign-on and an audit log come with the plan or behind a sales call. Prefers an edition they can run themselves.
- **The SaaS Product Lead** (v1.0): Product lead at a Vienna software company selling fleet management to 600 business customers, each of whom asks for reports the team keeps building by hand. Wants dashboards embedded in the product under its own brand, every customer seeing only their own rows, customers building their own views without a ticket, and an embedding licence whose cost they can put into the product's price before signing.
- **The Skeptic** (v1.0): Has seen "connect any data source" on a tool with eight connectors and a CSV upload, "self-service" that ends with every department defining revenue its own way, "free viewers" that need a paid licence to open a shared link, and "AI insights" that never show the query. Asks where the extracts are stored, whether dashboards and definitions can be exported in a format another tool reads — and what leaving would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Accepted audit reports: SSAE 16/ISAE 3402 Type 2 · ISO · NIST [S6]
- Audit rights: Customer · one per rolling 12 months [S6]
- Breach notification contact: compliance@databox.com [S6]
- CCPA: yes [S7]
- CCPA no sale or share: no [S8]
- CCPA response timeline: 45 · 45 · 10 [S8]
- CCPA rights: yes [S8]
- CCPA service provider: service provider [S6]
- Data return deletion: 30 [S6]
- Do not track: no [S8]
- DPA available: yes [S5]
- DPA available: yes [S7]
- DPA effective date: 2023-12-21 [S6]
- DPA part of tos: Terms of Service and Privacy Policy [S6]
- DPA roles: Processor · Controller [S6]
- Eea UK safeguards: appropriate contractual terms or other approved mechanisms [S8]
- Encryption: at rest · in transit [S1]
- GDPR: yes [S2]
- GDPR complaint right: yes [S8]
- GDPR compliance: yes [S5]
- Global application: yes [S5]
- ISO 27001 status: ISO 27001 · NIST Cybersecurity Framework · no [S7]
- Liability cap: no liability for errors, unavailability, user use, content, delays [S9]
- No AI training: no [S1]
- Permission aware AI: yes [S1]
- Sccs governing law: courts of Ireland · Irish law [S6]
- Security measures: encryption · firewalls · SSL 256 bit [S8]
- Security page: yes · Security and Compliance page [S8]
- SOC 2: yes [S2]

**Data**
- Automatic collection: browser types and versions · operating system · referrers · sub-websites · timestamp · IP address [S8]
- Cancellation immediate deletion: no · yes [S9]
- Cancellation method: Account link on Settings page · no [S9]
- Categories: first name · last name · email address · business phone number · Employees and representatives of data exporter [S6]
- Child data deletion SLA: 30 [S8]
- Children under 16: 16 [S8]
- Collected registration: name · company affiliation · company email address · password [S8]
- Dataset export CSV: CSV · yes [S19]
- Google account disconnect: yes [S8]
- Google signup: Google · yes [S8]
- Newsletter opt out: compliance@databox.com · yes [S8]
- No AI training on google data: no [S8]
- No google API data advertising: yes [S8]
- No sale: no [S8]
- No sensitive categories: no [S8]
- Retention: Term of the Agreement [S6]
- Retention: purpose-based retention [S8]
- Sensitive data: None [S6]
- User content confidentiality: yes · yes [S8]

**Hosting**
- Location: United States [S8]
- Provider: AWS [S7]

**Integrations**
- Agent capabilities: yes · yes · yes [S3]
- API: yes [S2]
- API access plans: no · Analyst [S4]
- API account scoping header: x-account-id · yes [S19]
- API auth method: x-api-key · API key [S19]
- API availability admins: All organizations and accounts · Admins [S19]
- API availability plans: API feature exclusive to select subscription plans · yes [S19]
- API base URL: https://api.databox.com [S19]
- API current version: current API version is v2, dataset-based [S19]
- API idempotency key: Idempotency-Key · yes · 24 [S19]
- API ingestion tracking: yes · /v2/datasets/{id}/ingestions · /v2/datasets/{id}/ingestion-statistics [S19]
- API management scope: API manages organization, usage, billing and invoices, accounts, users, connections, dashboards, integrations, metrics [S19]
- API v0 deprecated: yes · yes · no [S19]
- API v1 migration: v1 dataset-based, migration guide available to v2 [S19]
- Count: 130+ · tools · spreadsheets · databases · APIs [S1]
- Custom data integrations: yes [S2]
- Data input options: Zapier · Make · API · spreadsheet · SQL database [S12]
- Databox allowed ip: 52.4.198.118 [S11]
- Dataset column types: string · number · datetime [S19]
- Dataset modification: yes · filter rows · add calculated columns · rename columns · change order or visibility [S19]
- Dataset primary key: identify and update unique records · yes [S19]
- Datasource timezone default: IANA identifier · Etc/UTC [S19]
- Google user data policy: Google API Services User Data Policy · yes [S8]
- Ingest API: yes [S2]
- Mcp: Claude · n8n · ChatGPT · Cursor · yes [S2]
- Mcp server plans: no · Analyst [S4]
- Metric update sync frequency: metric updates follow the configured data source sync frequency [S19]
- Multiple datasets per source: yes [S19]
- Named sources: spreadsheets · databases · warehouses · HubSpot · Salesforce · GA4 · Stripe [S2]

**Legal**
- Address: 02109 · Boston · MA · 6 Liberty Square, PMB #471 · Databox Inc. · USA [S9]
- Assignment: yes · yes [S9]
- Breach notification: yes [S8]
- Company: Databox, Inc. · Boston, MA, USA [S15]
- Company info: Boston, MA, USA · Databox, Inc. [S3]
- Company info: Databox, Inc. · Boston, MA, USA [S4]
- Company location: Databox, Inc. · Boston, MA, USA [S14]
- Copyright date: 2026 · Databox, Inc. [S9]
- Entity: Databox, Inc. · Boston, MA, USA [S1]
- Entity: Databox, Inc. · 6 Liberty Square, PMB #471, Boston, MA 02109 USA [S6]
- Entity: Databox Inc. · State of California, USA [S8]
- Entity: Databox Inc. · Delaware, USA [S9]
- Governing law: Massachusetts law [S9]
- Legal entity: Databox, Inc. · Boston, MA, USA [S5]
- Policies incorporated: .*Privacy Policy · Security Policy · Cookies Policy · yes [S9]
- Policy change notice: 14 [S8]
- Policy revision date: 2026-10-26 · 2026-10-26 [S8]
- Postal address: 6 Liberty Square, PMB #471, Boston, MA 02109, USA [S8]
- Terms effective: 2023-04-26 · 2023-05-15 [S9]
- Terms update notice: no [S9]

**Pricing**
- Account pack cost: 1 · 50 · 20 · 5 [S4]
- Account pack faq cost: 1 · 50 · 25 · 5 [S4]
- Agency faq price: unlimited · 300 · 99 · 20 [S4]
- Agency features: unlimited users · bulk actions · custom templates · cross-account reporting via Genie and MCP server · Solutions Partner commissions [S4]
- Agency starting price: USD · 79 [S4]
- Analyst limits: 1 · 5 · 150 [S4]
- Analyst price: USD · 71 [S4]
- Billing periods: monthly · quarterly · yearly · no · yes · yes [S9]
- Custom plan includes: setup audit · AI stack design · build and integrate · ongoing optimization · yes [S4]
- Free account available: yes [S17]
- Free forever: yes · no [S1]
- Free forever: yes · no [S2]
- Free plan limits: 1 · 3 · 50 [S4]
- Free tier: yes · 3 [S12]
- Free trial days: 14 [S4]
- No refunds: no · no [S9]
- Payment method: yes [S9]
- Price change notice: email · 30 [S9]
- Tax treatment: US federal and state taxes · yes · yes [S9]
- Team core scale prices: 3 · 500 · 249 · 10 · 10 · 1000 · 399 · 30 [S4]
- Team limits: 3 · 10 · 500 [S4]
- Team price: USD · 199 [S4]
- Trial: yes · no [S12]
- White label addon price: 250 · any plan · month [S17]

**Product**
- 2FA available: yes · yes · yes [S18]
- Access control: yes · yes [S7]
- Access rules on behalf: Access rules restrict sensitive metrics and apply the same restriction to agents acting on a user's behalf [S15]
- Account access by staff: support diagnostics, user can opt out · yes [S9]
- Agentic analytics: plain-language questions · automated recurring analysis · delegation to agents [S2]
- Agents: Agents automate entire workflows under user oversight [S1]
- Agents coming soon: not included · not included · coming soon [S4]
- AI analyst: Genie AI Analyst answers plain-language questions with reasoning [S1]
- AI analyst: AI Analyst [S2]
- AI analyst: Platform includes an AI Analyst (related product update) [S13]
- AI analyst: yes [S17]
- Application security: yes · yes · yes [S7]
- Automatic semantic population: Semantic layer is populated automatically (connection-time pre-fill, inferred context, AI-suggested metadata) with human review of judgment-required parts [S15]
- Backups: yes · yes [S7]
- Bi capabilities: live visualization · targets · comparisons · trends · forecasts [S2]
- Branded alerts snapshots: yes [S17]
- Branded email domain alerts: yes [S17]
- Branded shareable urls: yes [S17]
- Branded web app login: yes [S17]
- Calculated columns: yes [S19]
- Compliance SOC 2: SOC 2 certified [S13]
- Connectors categories: Accounting & Finance · Advertising · Automation · Communication · CRM & Marketing · Customer Support · Design · Developer Tools · Docs & Wiki · Email & SMS Marketing · Email Marketing · Marketing Automation · Monitoring & Errors · Payments… [S3]
- CSV export: no · Team [S4]
- Custom branded databoards: yes [S17]
- Custom domain favicon: yes [S17]
- Customer base: 20,000+ [S1]
- Customer count claim: Trusted by 20,000+ businesses [S15]
- Customer rating: 4.4 · 4.6 [S9]
- Customize login help removal: Custom domain users can customize favicon, home screen, Databoards, emails, notifications and remove help docs/chat support links [S17]

**Subprocessors**
- List: Amazon Web Services (AWS) · Cloud Hosting · S3 (Amazon S3) · Cloud Hosting (Object Storage) · Google Cloud · Cloud Services · HubSpot · CRM and Ticket management · Intercom · Chat and Ticket Management · Asana · Project Management · SendGr… [S6]
- Outside contractors: hosting · customer service · credit card processing · fraud screening · mailing list hosting · AI service providers [S8]

**Support**
- Ask genie: in-app AI assistant Genie [S16]
- Chat email plans: no · Analyst · Team · Agency · Custom [S4]
- Demo booking: new users · yes [S19]
- Developer docs: yes [S1]
- Expert consultation: customers · yes [S19]
- Expert demo: yes · yes [S16]
- Help center: Help Center · Developers docs [S9]
- Privacy contact: compliance@databox.com [S8]
- SSO idp flow contact: live chat · help@databox.com [S18]
- Support email: email [S19]
- White label activation channels: chat · email [S17]

128 more facts on the canonical page: https://whats-best.ai/software/business-intelligence/databox

## Questions

### Is Databox European?

No. whats-best.ai classifies Databox as Rest of world.

### Where does Databox store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Databox have a free plan?

Yes. Databox has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/14059).

### What are the best alternatives to Databox?

As of 1 Nov 2026, the panel rates [Metabase (3.5/5)](https://whats-best.ai/software/business-intelligence/metabase), [Preset (Apache Superset) (3.5/5)](https://whats-best.ai/software/business-intelligence/preset) and [Holistics (3/5)](https://whats-best.ai/software/business-intelligence/holistics) highest among the other 15 Business Intelligence & Dashboards products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Luzmo](https://whats-best.ai/software/business-intelligence/luzmo) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Databox alternatives](https://whats-best.ai/software/business-intelligence/databox/alternatives).

## Head-to-head

- [Databox vs Whatagraph](https://whats-best.ai/compare/databox-vs-whatagraph.md)

## What this page leaves out

- 19 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 11 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://databox.com/ (checked 2026-11-01)
- [S2] Features page: https://databox.com/product (checked 2026-11-01)
- [S3] Integrations page (connectors): https://databox.com/connectors (checked 2026-11-01)
- [S4] Pricing page: https://databox.com/pricing (checked 2026-11-01)
- [S5] GDPR page: https://databox.com/gdpr (checked 2026-11-01)
- [S6] Data processing agreement (dpa): https://databox.com/data-processing-agreement (checked 2026-11-01)
- [S7] Security / trust page: https://databox.com/security-and-compliance (checked 2026-11-01)
- [S8] Privacy policy: https://databox.com/privacy-policy (checked 2026-11-01)
- [S9] Terms of service: https://databox.com/terms-of-service (checked 2026-11-01)
- [S10] Data sources, connectors & refresh — found from sitemap: https://help.databox.com/add-a-database-connection-using-an-ssh-tunnel (checked 2026-11-01)
- [S11] Data sources, connectors & refresh — found from sitemap: https://databox.com/connect-aws-redshift-database (checked 2026-11-01)
- [S12] Dashboards, charts & interactivity — found from sitemap: https://databox.com/product/tv-dashboards (checked 2026-11-01)
- [S13] Dashboards, charts & interactivity — found from sitemap: https://databox.com/databoards-build-kpi-reports-perfectly-optimized-every-device (checked 2026-11-01)
- [S14] Self-service analysis & shared metrics — found from sitemap: https://databox.com/how-to-feature/calculated-metrics (checked 2026-11-01)
- [S15] Self-service analysis & shared metrics — found from sitemap: https://databox.com/semantic-layer-for-ai (checked 2026-11-01)
- [S16] Sharing, scheduled reports & embedding — found from sitemap: https://help.databox.com/share-a-dashboard (checked 2026-11-01)
- [S17] Sharing, scheduled reports & embedding — found from sitemap: https://databox.com/white-label-databox (checked 2026-11-01)
- [S18] Access control, administration & portability — found from sitemap: https://help.databox.com/set-up-single-sign-on-sso (checked 2026-11-01)
- [S19] Access control, administration & portability — found from sitemap: https://help.databox.com/send-data-to-databox-via-api (checked 2026-11-01)

---

Cite as: whats-best.ai, "Databox — Business Intelligence & Dashboards", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/business-intelligence/databox

Corrections: https://whats-best.ai/correct/1265?target=page