The Next AI Software Toll Booth Owns the Attachment

On paper, Box just posted another respectable software quarter. In practice, it may have shown where a surprising slice of enterprise AI economics is headed.
The market keeps asking which model wins. A more useful question is who gets paid every time a company tries to turn a messy file into a decision. That is where the money is getting stickier.
Picture an accounts-payable team opening a vendor invoice that arrived as a PDF attachment, then checking whether the purchase order matches, whether the amount clears policy, and whether someone senior needs to sign off. The hard part is not reading the invoice. The hard part is getting the document, the extracted data, the workflow, the security rules, and the human approval into one place without creating a compliance mess.
That is the lane Box is trying to own.
Its fiscal first-quarter results were strong enough on their own. Revenue rose 11% year over year to about $306 million. Remaining performance obligations reached roughly $1.6 billion. Non-GAAP operating margin expanded to 27.7%. Management tied the momentum directly to Enterprise Advanced and Box AI adoption.
But the more important signal came a month earlier, when Aaron Levie described Box Automate to Reuters in very plain terms: let AI pull the key data from piles of invoices and corporate documents, then tee up a fast human review. That sounds small. It is not.
It points to a less glamorous but more durable AI business model than the market usually obsesses over.
Most AI commentary still swings between two extremes. Either models replace software, or software companies slap a copilot onto the sidebar and call it a moat. Real enterprise budgets are moving somewhere in the middle.
Companies are not buying AI because they enjoy chatting with a model. They are buying AI to shorten the path between an incoming document and an auditable action.
That matters because unstructured content is where a lot of corporate friction still lives:
- invoices that arrive in different formats
- contracts that need clause checks before renewal
- claims documents that must be reviewed before payment
- HR files that cannot move unless permissions are correct
The winner in those workflows is not automatically the smartest model. It is often the platform that already sits on the file, knows who may touch it, logs what changed, and can pass the output into a decision queue.

This is why I think investors still underrate the “boring” layer of enterprise AI.
Reuters reported last week that software stocks have started to recover as investors become more selective about who is genuinely exposed to AI disruption and who may benefit from it. Workday’s recent results made a similar point: buyers will still pay for software that governs sensitive workflows, not just displays information.
Box fits that pattern, but with an even more specific angle. It is building around the attachment.
That sounds trivial until you remember how much business still runs through files. A surprising amount of corporate life is still trapped in PDFs, scanned forms, onboarding packets, renewal decks, policy binders, and board documents. AI becomes commercially useful when somebody can turn that pile into action without breaking permissions, retention rules, or approval chains.
In other words, the value is not just “search your documents with AI.” The value is “use your documents to move money, approve risk, or finish a process faster.”
That is a much better business than a generic assistant.
It also changes how to think about software multiples in this cycle. If AI reduces the value of surface-level seat software, it can increase the value of workflow toll booths. The platforms that sit between raw content and approved action may gain pricing power precisely because every company wants more automation but fewer control failures.
Levie hinted at the tension well in his Reuters interview. Boards want more AI, then immediately ask why the bill is so high. That contradiction is not a temporary talking point. It is the operating reality of this market.
Enterprise buyers want three things at once:
- lower labor intensity
- faster decisions
- tighter control
Most AI products can credibly promise one or two. The products that can package all three inside an existing workflow are where spend gets harder to cut.
That does not mean Box becomes the next mega-platform. It does mean the market may still be too focused on headline model competition and not focused enough on workflow custody. The companies that own the messy handoff between AI output and human accountability could end up collecting some of the healthiest margins in the stack.
The next big AI toll booth may not look like a model lab at all. It may look like the software that already owns the attachment.