Is Microsoft Copilot Safe for Confidential Information? The Real Risk Is Oversharing
Microsoft 365 Copilot does not train on your data, and on a work account your prompts get the same contractual protection as your email and SharePoint files. The real risk is somewhere else: Copilot can find everything a person has access to, including the files nobody remembered were shared with the whole company.
Below: what Microsoft commits to, the difference between a work and a personal account, why oversharing is the risk to fix first, what changes when Copilot is connected to systems outside Microsoft, and five checks to run before a wider rollout.
Does Copilot train on your data?
Not on a work account. Microsoft’s own wording for Microsoft 365 Copilot is that prompts, responses and data accessed through Microsoft Graph are not used to train the foundation models. Anyone signed in with a work account (Entra ID) gets what Microsoft calls Enterprise Data Protection automatically: Microsoft acts as your data processor, and prompts and responses are covered by the same terms as Exchange and SharePoint. They are also logged, so they can be found in audit and eDiscovery and governed with retention policies in Purview. Sources: Microsoft 365 Copilot privacy and Enterprise Data Protection.
Work account or personal account
| Copilot on a work account | Copilot on a personal Microsoft account | |
|---|---|---|
| Used to train models? | No | Can be, unless the person turns it off in their privacy settings |
| Who agreed the terms | Your company, as Microsoft’s customer | The employee, personally |
| Logged for audit and eDiscovery | Yes, in your tenant | No |
| Right for company work | Yes | No |
The same name covers both, so the first check is the same as for Claude and ChatGPT: are people signed in with their work account? A colleague using the free consumer Copilot app on their phone with a personal login is outside all of the protection above.
The real risk: oversharing
Copilot only shows a person what they already have permission to open. That sounds safe, and it is the reason most Copilot rollouts stall. In most companies, permissions have drifted for years: a salary file in a folder shared with “everyone except external users”, a board deck behind an “anyone with the link” link. Nobody found them because nobody searched. Copilot searches for you.
Someone asks Copilot to summarise “what we pay our consultants” and gets an answer built from a pay review that was never meant to be shared, but technically was. Copilot did nothing wrong. The permission was wrong.
Microsoft’s own guidance is to fix this before rolling out widely, and the tools come with Copilot licences: SharePoint Advanced Management for permission reports, and Restricted Content Discovery to hide a site from Copilot without changing who can open it. Note that Restricted Content Discovery works on SharePoint sites, not OneDrive. See Microsoft’s guide to preparing SharePoint for Copilot.
GDPR and where data is processed
Microsoft 365 Copilot is part of Microsoft’s EU Data Boundary: for EU and EFTA customers, data is stored and processed within the boundary, with limited exceptions. One exception is worth knowing. At peak demand Microsoft can route Copilot processing outside the boundary (“flex routing”), and EU administrators can switch that off in the Microsoft 365 admin center. See flex routing. For a company that needs data to stay in Europe, Copilot is the strongest of the big three today.
When Copilot reaches beyond Microsoft 365
Inside Microsoft 365, permissions come from SharePoint, Teams and Exchange. The moment Copilot, Claude or ChatGPT is connected to the CRM, the finance system or the HR system, those permissions no longer cover it. Each connection needs its own answer to the same questions: whose login does it use, can it only read or also write, and is there a log of what it fetched?
That is the gap Deployed OS fills. The company decides once which systems the AI may reach, user groups decide who may read or change what in each one, every person signs in with their own login and every call is logged. It works the same in Claude and ChatGPT, so a company that runs more than one AI tool keeps one set of rules. If you are choosing between tools, see Copilot vs Claude.
Five checks before a wider rollout
- Work accounts only. Make sure people use Copilot signed in with their work account, not the consumer app with a personal login.
- Run a permissions report. Find the sites and files shared with everyone or by open links, starting with HR, finance and management.
- Hide what must not surface. Use Restricted Content Discovery for sensitive SharePoint sites while you clean up the permissions.
- Turn on audit and retention. Purview Audit, and a retention policy for Copilot prompts and responses that matches your other records.
- Decide on connections outside Microsoft. Which other systems may the AI reach, for whom, read or write, and where is that logged?
For the same question about other tools, see is Claude safe for confidential information and is ChatGPT safe for confidential information.
Frequently asked questions
Is Microsoft Copilot safe for confidential information?
On a work account, yes, with one condition. Microsoft 365 Copilot does not use prompts, responses or your Microsoft 365 data to train its models, and prompts and responses get the same contractual protection as your email and SharePoint files. The condition is permissions: Copilot shows people everything they are allowed to open, so files shared too widely become easy to find. Fix oversharing before a wide rollout.
Does Microsoft Copilot train on your data?
Not on a work account. Microsoft states that prompts, responses and data accessed through Microsoft Graph are not used to train the foundation models behind Microsoft 365 Copilot. The consumer Copilot app on a personal Microsoft account is different: conversations can be used for training unless the person turns it off in their privacy settings.
What is Copilot oversharing?
Oversharing is when files are shared more widely than intended, for example with everyone in the company or through open links, and nobody noticed because nobody searched for them. Copilot only shows what a person may open, but it finds those files instantly. Microsoft’s tools for it, SharePoint Advanced Management and Restricted Content Discovery, come with Copilot licences.
Is Microsoft Copilot GDPR compliant?
Microsoft 365 Copilot is covered by Microsoft’s data protection terms and is part of the EU Data Boundary, so data for EU and EFTA customers is stored and processed within the EU with limited exceptions. One exception, flex routing at peak demand, can be switched off by administrators in the Microsoft 365 admin center.
Does Copilot keep a log of prompts and responses?
Yes, on a work account. Prompts and responses are logged and available for audit and eDiscovery, and you can set retention policies for them in Microsoft Purview. Audit records capture the activity; the content itself is reached through eDiscovery.
What about Copilot connected to systems outside Microsoft 365?
Microsoft 365 permissions only cover Microsoft 365. When an AI tool is connected to the CRM, finance or HR system, each connection needs its own answer: whose login it uses, whether it can write, and where it is logged. An MCP gateway such as Deployed OS sets those rules once for every system and every AI tool.
Found this useful? Send it to someone who needs it.