Microsoft Copilot Data Boundary in the UK: What Stays in Region

UK-based organizations using Microsoft Copilot need to know exactly which data remains within the country’s borders. Microsoft has established a data boundary for the European Union and the United Kingdom that governs where customer data is stored and processed. This boundary determines whether prompts, responses, and metadata from Copilot sessions reside on UK servers or travel to other regions. This article explains the scope of the UK data boundary, what data is covered, what is excluded, and how to verify your tenant’s configuration.

Scope of the UK Data Boundary for Copilot

Microsoft introduced the EU Data Boundary in 2023, which includes the United Kingdom. For Copilot services within Microsoft 365, this boundary covers the storage and processing of customer data at rest. Customer data includes the text of prompts you type, the responses Copilot generates, and the metadata associated with each interaction, such as timestamps and user identifiers.

When your Microsoft 365 tenant is provisioned in the UK and you have enabled the EU Data Boundary, Copilot processes and stores this customer data within UK data centers. Microsoft operates data center regions in London, Cardiff, and Durham. Data in transit between services within the UK boundary remains within the country.

However, not all data falls under the boundary. Microsoft distinguishes between customer data and service data. Service data includes telemetry about how Copilot performs, error logs, and aggregated usage patterns. This service data is not covered by the UK data boundary and may be processed in other regions, including the United States.

What the Boundary Covers

• Prompt text and Copilot responses
• Conversation history stored in Microsoft 365
• User identifiers and timestamps associated with Copilot sessions
• Files and documents attached to prompts when stored in SharePoint or OneDrive for Business

What the Boundary Does Not Cover

• Anonymized telemetry about Copilot usage and performance
• Model training data — Microsoft does not use your prompts to train its AI models, but the infrastructure for model updates may be outside the UK
• Data transmitted to third-party plugins or connectors that are not hosted in the UK
• Bing Chat Enterprise data, which is governed by a separate data boundary

Verifying Your Tenant Data Location

To confirm that your Microsoft 365 tenant is configured for the UK data boundary, follow these steps.

1. Open the Microsoft 365 admin center
   Go to admin.microsoft.com and sign in with Global Administrator or Billing Administrator credentials.
2. Navigate to Org settings
   In the left navigation pane, select Settings, then select Org settings.
3. Open the Data location tab
   On the Settings page, select the Data location tab. This page shows the primary data location for your tenant.
4. Check the country
   If your tenant is based in the UK and enrolled in the EU Data Boundary, the page displays “United Kingdom” as the data location for core customer data.
5. Review the services list
   Scroll to the Services section. Find Microsoft 365 Copilot and verify that the data location is listed as UK. If it is not listed, your tenant may not yet be enrolled in the boundary.

If your tenant is not enrolled, you can request enrollment through Microsoft Support. Enrollment is available for tenants with a UK billing address and a UK-registered domain.

Common Misconceptions and Edge Cases

Does the UK Data Boundary Cover Copilot for Bing?

No. Copilot for Bing, also called Bing Chat, operates under a separate data governance framework. Bing Chat data is processed in the United States unless you use Bing Chat Enterprise with a work account. Bing Chat Enterprise stores chat data in the same region as your Microsoft 365 tenant, but the underlying search and model inference may still occur outside the UK.

Does the Boundary Apply to Copilot in Microsoft 365 Apps?

Yes, for the core Copilot experience in Word, Excel, PowerPoint, Outlook, and Teams. The prompts and responses are stored in the user’s Exchange Online mailbox and SharePoint site, both of which are governed by the tenant data location. If your tenant data location is UK, these items remain in UK data centers.

What Happens When I Use a Third-Party Plugin?

When you enable a plugin from a third-party developer, the data you share with that plugin may leave the UK data boundary. The plugin’s terms of service and data processing location apply. Microsoft does not control where third-party plugins store or process data. Review the plugin’s privacy policy before enabling it in the Copilot pane.

Can I Move Existing Copilot Data to the UK?

If your tenant was created outside the UK and later moved, existing Copilot data may remain in the original region. Microsoft provides a data migration tool for core services like Exchange Online and SharePoint, but Copilot data is migrated as part of those services. There is no separate migration tool for Copilot alone. Contact Microsoft Support to initiate a tenant-to-tenant migration if needed.

EU/UK Data Boundary vs Standard Global Processing: Key Differences

Item	EU/UK Data Boundary	Standard Global Processing
Data at rest location	UK or EU data center	Any Microsoft data center worldwide
Prompt and response storage	In-region Exchange and SharePoint	Potentially outside region
Telemetry processing	May leave region	May leave region
Third-party plugin data	Not covered	Not covered
Enrollment requirement	Opt-in via Microsoft Support	Default configuration

Organizations that handle sensitive UK government data or financial services data often require the EU/UK Data Boundary to meet regulatory obligations. Standard global processing is the default for tenants created before the boundary was introduced.

You can now verify your tenant’s data location in the Microsoft 365 admin center and understand which Copilot data stays in the UK. If your organization requires stricter data residency, consider disabling third-party plugins and reviewing the data location settings for Bing Chat Enterprise. For the most current list of UK data center locations, refer to the Microsoft Trust Center documentation.