Skip to content
← Back to the guide

Microsoft 365 Copilot data security and privacy

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 4

Microsoft 365 Copilot data security and privacy

How Microsoft 365 Copilot handles your tenant's data — what's sent to the model, what's retained, and what compliance covers.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-copilot-data-security

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 4
01

Can Copilot access data a user is not allowed to see?

No. Copilot inherits the user's existing permissions through Microsoft Graph; it can only retrieve content the user could open themselves. The risk is the reverse — content users technically had access to but never foun…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-copilot-data-security

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 4
02

Does Copilot respect sensitivity labels?

Yes. Copilot honours label encryption (it cannot use content the user's label permissions do not allow it to extract from) and responses inherit the highest label of the referenced content. Labels with strict extraction…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-copilot-data-security

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 4
03

Where does Copilot process my prompts?

Within the Microsoft 365 service boundary, in Microsoft's Azure OpenAI instances, under EU Data Boundary commitments for EU tenants. Prompts and responses are stored in the user's mailbox as Copilot activity, subject to…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-copilot-data-security

Slide 4Download PNG

Auto-generated from Microsoft 365 Copilot data security and privacy. This page is not indexed and isn't part of the guide itself.