NYT explains how PRISM works and how Google complies.

Link. Makes sense. The ‘lockbox’ is a convenience enabling cheaper/faster FISA compliance.