Microsoft 365 Copilot
Chat to start writing, planning, learning and more with Microsoft 365 Copilot
Risk score
4/10Medium
Assessment across data handling, compliance, security and transparency.
Overview
Chat to start writing, planning, learning and more with Microsoft 365 Copilot
Risk factors
3- Cloud SaaS with data sent to Microsoft for processing.
- Requires user input which may include sensitive information.
- Opt-out for training on user data may not be straightforward.
Recommendations
4- Audit SharePoint permissions before rollout to prevent oversharing
- Enable Purview data classification and DLP
- Configure tenant-level training and retention controls
- Monitor Copilot audit logs for sensitive access
Data handling
- Storage
- Customer data stored in Microsoft 365 tenant with EU Data Boundary options
- Retention
- Follows tenant retention policies; prompts/responses stored per M365 settings
- Training on inputs
- Does not use customer data to train foundation models
More AI Assistants tools
See all →Microsoft Copilot
Microsoft's AI assistant family spanning free consumer Copilot (copilot.microsoft.com) and Microsoft 365 Copilot embedded in Word, Excel, Outlook, Teams, PowerPoint, and Windows.
Moveworks AI
Enterprise agentic AI assistant platform (acquired by ServiceNow) for IT, HR, Finance, and operations automation across workplace systems.
See the AI tools in use across your organisation.
Connect your tool research to the employee AI activity and data security questions that matter to your team.