Google says customer prompts, context and outputs "remain entirely within your designated data perimeter and are never used to train foundation models," with Zero Data Retention options "available coming soon"[2]. It says the OpenAI models run on dedicated Google Cloud infrastructure, with Confidential Compute coming soon, and that queries are routed through isolated gateways so that data in transit stays inside Google Cloud and third-party model providers have no unauthorized access to the customer's cloud environment[2].
It also says every agent and model interaction runs under an authenticated identity, with VPC Service Controls and unified audit logging[2]. The posts do not attach a region list, a retention period or an outside audit to those sentences.
Yashodha Bhavnani, VP of AI Products at Box, is quoted in Google's post. She says that by using OpenAI models through Google Cloud, Box "will be able to give customers access to OpenAI's frontier AI models alongside Google Cloud's security and compliance capabilities"[2]. The quote is about what Box expects to offer. It does not say a Box product has switched over.