When you use Microsoft Copilot, your prompts and the responses generated may be used by Microsoft to improve its AI models. This data processing happens by default for certain Copilot experiences, especially those connected to the consumer service rather than your organization’s tenant. If you want to prevent your prompts from being used for model … Read more
Microsoft Copilot integrates with Microsoft 365 services and uses large language models to generate responses based on your organization’s data. Customers subject to the General Data Protection Regulation need to understand how Copilot handles personal data, where it processes data, and what controls exist to meet compliance obligations. This article explains the key GDPR compliance … Read more
When you use Microsoft Copilot in Microsoft 365 apps like Word, Excel, or Teams, your conversation history is saved automatically. Many business users worry about where this data lives and whether it is private. The storage location depends on the Copilot license you have and the app you are using. This article explains exactly where … Read more
Microsoft 365 administrators and compliance officers need to know where Copilot data is stored and processed. The Microsoft Copilot Customer Data Boundary is a set of regional storage and processing rules that define where customer data can reside. This article explains how the boundary works, what data is covered, and how to verify your tenant’s … Read more
Many organizations want to prevent Copilot from processing or generating content from highly confidential files. By default, Copilot can access any Microsoft 365 file that a user has permission to read. This creates a risk where sensitive data might appear in a Copilot response shared with others. Sensitivity labels in Microsoft Purview Information Protection can … Read more
Microsoft Copilot integrates deeply with Microsoft 365 services, which means it can process data from Exchange Online, SharePoint, and Teams. Customer Lockbox is a compliance feature that controls Microsoft engineer access to your tenant data during support requests. When both features are enabled together, confusion arises about whether Copilot can operate normally or if its … Read more
You need to understand how Microsoft Copilot protects your data when it is stored on servers and when it moves between your device and the cloud. Encryption is the core security mechanism that prevents unauthorized access to your prompts, responses, and files. This article explains the difference between encryption at rest and encryption in transit, … Read more
Organizations evaluating Microsoft Copilot for enterprise use often ask whether the service meets SOC 2 compliance requirements. SOC 2 is a widely recognized auditing standard that verifies a service provider controls customer data securely. Microsoft Copilot inherits SOC 2 compliance from the underlying Microsoft 365 and Azure platforms, but the exact scope and coverage depend … Read more
You want to prevent Copilot from accessing certain email folders in Outlook, such as a private archive or a project folder with sensitive information. By default, Copilot can read messages across your entire mailbox when you use features like Summarize or Draft with Copilot. This article explains how to use sensitivity labels and folder permissions … Read more
When you first start using Microsoft Copilot in Microsoft 365 apps like Word, Excel, or Teams, the tool sends certain data to Microsoft by default. This data includes parts of your prompts, the text or content Copilot reads from your document, and the generated responses. The purpose of this data collection is to improve Copilot’s … Read more