Microsoft Copilot

Microsoft Copilot is both a consumer chat assistant at copilot.microsoft.com and an enterprise add-on (Microsoft 365 Copilot) that grounds responses in a tenant's Microsoft Graph — email, files, chats, meetings, and calendar — through Word, Excel, PowerPoint, Outlook, Teams, OneNote, and Windows. Microsoft 365 Copilot keeps prompts, responses, and grounding data inside the Microsoft 365 service boundary, under the customer's existing DPA, SOC 1/2, ISO 27001/27018, HIPAA BAA, and EU Data Boundary commitments, and does not train foundation models on tenant data. Consumer Copilot (free and Copilot Pro) runs on a personal Microsoft account and is outside those tenant guarantees.

Storage

Microsoft 365 Copilot processes prompts, responses, and grounding data inside the customer's Microsoft 365 service boundary, with EU Data Boundary support for EU tenants. Consumer Copilot runs in Microsoft's global consumer infrastructure.

Retention

M365 Copilot interactions are stored in the user's Exchange mailbox as hidden items and retained per the tenant's retention and eDiscovery policies. Consumer Copilot chat history is retained per the Microsoft Services Agreement and user-controlled activity settings.

Training on inputs

Microsoft 365 Copilot prompts, responses, and grounding data are not used to train foundation LLMs. Consumer Copilot prompts may be used to improve Microsoft services per the Microsoft Privacy Statement unless the user opts out.