Azure Data Box

Azure Data Box is a secure, physical Azure device used to transfer large amounts of data (tens to hundreds of terabytes) into or out of Azure when network transfer is slow, expensive, or impractical. Microsoft ships the device to your location; you copy data locally and ship it back. Data is automatically uploaded to Azure storage, with end‑to‑end tracking and encryption throughout the process.

Device selection depends on your data size. For under 35 TB, use Data Box Disk, which provides 7 TB of usable capacity each and can be ordered in packs of up to five. For transfers between 35 TB and 300TB, use Data Box 120. It offers 120 TB of usable space in a rugged, suitcase-like compact form factor. For large migrations exceeding 300 TB, use Data Box 525, which provides 525 TB of usable capacity in a similar compact design.

Azure Data Box devices are available at no service cost for standard use. Data Box 120 includes up to 10 days of use, and Data Box 525 includes up to 20 days. This also includes Microsoft-managed shipping at no additional charge (where available in the source region).
Extra day fees beyond the free usage period, and standard storage transaction costs will apply, as well as egress charges for export orders. In extreme cases of deliberate damage or loss of the device, a lost/damage fee may be applied.

You can verify availability via the Azure global infrastructure site by filtering for the Data Box service. Also, when you create a Data Box order, the Azure Portal automatically validates if the service is available for your chosen source country and target Azure region. While physical device shipping is only domestic (within a commerce boundary), you can upload data to any Azure region using cross-region transfer.

You can natively ingest into Azure Blob Storage (block blobs/ADLS Gen2), Azure Files, or Managed Disks (via VHDs). This enables migration of large datasets or archives to object storage and on-premises file server to Azure Files. For other targets such as SharePoint, Azure SQL, or ANF, you can use a two-step process by first moving raw data into a supported target (Azure Blob Storage/Azure Files) via Data Box and then using secondary tools to stage your data for a faster final migration.

Your data is protected by default hardware encryption and optional AES 256-bit double encryption (FIPS 140-2 Level 2). Only you hold the unlock passkey, and even Microsoft personnel cannot access your data. Devices feature tamper-evident seals and TPM-secured keys. After the automated data upload, the device undergoes a NIST 800-88-r2 compliant sanitization. Device transit is tracked via secure milestones, ensuring a full chain of custody from your site to the Azure datacenter.

Order preparation takes 1–2 business days, followed by 2–3 days for delivery. Your on-premises data copy time varies by network speed and data size, though using multi-threaded tools helps you finish within your free usage period. Return transit takes another 2–3 days. Finally, the data upload at the Azure datacenter starts once processing is complete and depends on nature of data, size, and number of files.

Microsoft ships devices via regular next-day air in most regions; lead times vary by location. Tracking via carrier milestones (UPS/FedEx/DHL or other regional shippers) and chain-of-custody logs is available. In the US and EU, we support GPS tracking; contact adbops@microsoft.com before ordering to opt in. While physical devices stay domestic, cross-region transfers let you ingest data into any Azure region globally over the Azure backbone.

First, place an order in the Azure portal. Once the device arrives, connect it to your network and unlock it via the local web UI using your portal passkey. Mount the device as a network share and copy your data using tools such as Robocopy over SMB or NFS. When finished, run the "Prepare to ship" step in the UI to lock the drives and get a return label. Return it via the carrier. Microsoft then uploads the data to your Azure storage and securely wipes the device. Finally, verify your data.

Data Box supports connection using QSFP28 ports with up to 100‑GbE RDMA capability for parallel, high-speed transfers (up to 7Gbps via SMB Direct for medium to large files) with NVMe hardware. For copying, customers can use standard SMB/NFS/REST protocols and to maximize throughput, especially with millions of small files, the built-in Data Copy service optimizes the transfer process. At the datacenter, upload happens via REST-based transfer.

Azure Data Box inherits Azure’s robust compliance portfolio, including ISO 27001, SOC 1-3, HIPAA, and GDPR. For GDPR, data remains confidential and under your control since it is encrypted and inaccessible to Microsoft. It meets FIPS 140-2 Level 2 cryptographic standards and NIST r2 erasure guidelines, satisfying strict government requirements. This makes it suitable for highly regulated industries such as healthcare and finance. For more details, visit the Azure Trust Center.