Copilot data, privacy and security

Requirements, exceptions and scope

• GuidanceExceptionScope4 passages

  Microsoft Copilot, including Microsoft Copilot Search, is compliant with our existing privacy, security, and compliance commitments to Microsoft 365 commercial customers, including the General Data…

• How does Microsoft Copilot use your proprietary organizational data?ExceptionScope2 conditions4 passages
• Data stored about user interactions with Microsoft CopilotScope1 condition1 passage
• Microsoft Copilot and the EU Data BoundaryExceptionScope2 passages
• Extensibility of Microsoft CopilotRequirementException4 conditions2 passages
• How does Microsoft Copilot protect organizational data?ExceptionScope2 conditions3 passages
• Meeting regulatory compliance requirementsScope2 passages
• Microsoft Copilot and privacy controls for connected experiencesScope1 passage
• Privacy control for connected experiences that analyze your contentScope2 conditions2 passages
• Privacy control for optional connected experiencesScope1 condition1 passage
• About the content that Microsoft Copilot createsRecommendation1 condition1 passage
• How does Copilot block harmful content?Scope2 passages
• Committed to responsible AIRequirement1 condition1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

1. 9 Mar 2026
   Exception added Data, Privacy, and Security for Microsoft 365 CopilotMicrosoft's source, commit 4082d52
2. 9 Mar 2026
   No longer on the page Data, Privacy, and Security for Microsoft 365 CopilotMicrosoft's source, commit 4082d52
3. 7 Jan 2026
   Exception added Data, Privacy, and Security for Microsoft 365 CopilotMicrosoft's source, commit 3070cf6
4. 7 Jan 2026
   No longer on the page Data, Privacy, and Security for Microsoft 365 CopilotMicrosoft's source, commit 3070cf6
5. 6 Jan 2026
   No longer on the page Data, Privacy, and Security for Microsoft 365 CopilotMicrosoft's source, commit 927fc94
6. 6 Jan 2026
   Exception added Data, Privacy, and Security for Microsoft 365 CopilotMicrosoft's source, commit 927fc94
7. 6 Jan 2026
   No longer on the page Meeting regulatory compliance requirementsMicrosoft's source, commit 927fc94
8. 6 Jan 2026
   Scope added Meeting regulatory compliance requirementsMicrosoft's source, commit 927fc94
9. 6 Jan 2026
   Exception added Data, Privacy, and Security for Microsoft 365 CopilotMicrosoft's source, commit bb75cf1
10. 6 Jan 2026
    New dated step How does Microsoft 365 Copilot use your proprietary organizational data?Microsoft's source, commit bb75cf1

    Starting January 7, 2026
11. 6 Jan 2026
    Scope added How does Copilot block harmful content?Microsoft's source, commit bb75cf1
12. 20 Aug 2025
    Scope added Meeting regulatory compliance requirementsMicrosoft's source, commit 7d9f32b