Get your Free 90 Days Gen AI Risk Discovery Trial -90 Days Gen AI Risk Trial -Start Now
["Data Breaches","IP Infringement","Algorithmic Bias","Rapidly Evolving Regulations"]·office.com
Microsoft 365 Copilot
Chat to start writing, planning, learning and more with Microsoft 365 Copilot
Risk Score
Medium4/10
Independent assessment across data handling, compliance, security and transparency.
Risk factors
3- Cloud SaaS with data sent to Microsoft for processing.
- Requires user input which may include sensitive information.
- Opt-out for training on user data may not be straightforward.
Recommendations
4- Audit SharePoint permissions before rollout to prevent oversharing
- Enable Purview data classification and DLP
- Configure tenant-level training and retention controls
- Monitor Copilot audit logs for sensitive access
Data handling
- Storage
- Customer data stored in Microsoft 365 tenant with EU Data Boundary options
- Retention
- Follows tenant retention policies; prompts/responses stored per M365 settings
- Training on inputs
- Does not use customer data to train foundation models