How ZTO’s “Box” Platform Merges Security and Collaboration in a Zero‑Trust Era

Introduction

The business digitalization field faces a long‑standing dilemma: how to guarantee user experience while ensuring security. The solution requires deep integration of business and security domains, decoupling them at the technical layer while presenting a seamless experience to end users.

Background and Strategic Significance

During the COVID‑19 outbreak in early 2020, remote work surged, driving rapid adoption of online collaboration, video conferencing, and secure data transmission tools. ZTO’s “Box” product replaced the previously used DingTalk suite, serving hundreds of thousands of users daily and continuously iterating to improve both usability and security.

What Is a Platform?

A platform provides a front‑end framework and core services, abstracting business logic from applications. It should deliver value to its users—whether enterprises or individual users—by offering clear positioning, stable SDKs/APIs, and enabling third‑party co‑creation much like an aircraft manufacturer supplies the airframe while specialists provide seats and entertainment.

Product Features and Architecture

“Box” aims to solve two core problems: unified access to diverse business systems and robust security for remote work. It adopts a zero‑trust architecture, acting as the unified entry point for all applications and a security collaboration hub.

Core Capabilities

Business : Flexible management console, integration with third‑party services (e.g., package scanning, asset entry, network detection).

Collaboration : Instant messaging, search, audio‑video meetings, cloud storage, scheduling, to‑do lists, address book, and online document editing across Android, iOS, macOS, Windows, and Linux.

Framework : Public components and front‑end framework for rapid business onboarding, fine‑grained account and permission control, rich SDKs, and open‑platform documentation.

Security : Integrated antivirus, DLP, network authentication, remote assistance, continuous monitoring, and behavior analysis.

Technical Architecture

The desktop client is built with Electron + React + SQLite, enabling cross‑platform development while leveraging rich Node.js and Chromium ecosystems. The mobile side uses a hybrid of native, React Native, and web technologies: Android follows an MVVM + componentized approach with AAC, OkHttp, RxJava, Retrofit, and Glide; iOS uses CocoaPods with Objective‑C and Swift.

Key Functional Highlights

Features include a unified workbench/portal, customizable application ordering, automatic Wi‑Fi authentication, network health detection, software‑defined perimeter (SDP) integration, event‑push confirmations, and built‑in antivirus/DLP with one‑click remediation.

Experience and Challenges

Prioritization follows the classic urgent‑important matrix, balancing rapid response to critical production issues with longer‑term feature development. The team emphasizes detail‑orientation, co‑building with multiple departments, and agile MVP‑driven iteration cycles ranging from one‑week to three‑week releases.

Future Plans

Upcoming work focuses on standardizing product functions, enhancing cloud storage, live streaming, knowledge‑base construction, deeper zero‑trust capabilities (identity, device, network, application, data), and expanding data‑loss‑prevention, encryption, and UEBA analytics.

Conclusion

“Box” embodies an all‑in‑one security‑collaboration platform designed to support ZTO’s post‑pandemic digital transformation, delivering seamless remote access, robust protection, and continuous operational improvement.