Is free Microsoft 365 Copilot Chat safe for company data?

By Hugh Donatello, LAN Service Group · Reviewed October 21, 2026

Short answer

It can be, for staff signed in with an eligible work account. Microsoft says Copilot Chat includes enterprise data protection at no extra cost: prompts and responses fall under its Data Protection Addendum, are not used to train foundation models, and can be audited and retained with Microsoft Purview. The main gaps are web search queries sent to Bing, which sit outside that addendum, personal Microsoft accounts, which fall outside your tenant, and agents, which follow their own terms.

A note on names

Microsoft has renamed Microsoft 365 Copilot Chat to Microsoft Copilot Chat, and Microsoft 365 Copilot to Microsoft Copilot. It says security, compliance and privacy for organizations did not change, and some screens and licenses still use the old names. In the apps, a user without the paid add-on may see labels such as Copilot Chat (Basic), Microsoft 365 Copilot (Basic) or Copilot (Basic), depending on licensing and tenant configuration. This page is about that included experience: what Microsoft calls enterprise data protection (EDP), what it covers, what it leaves out, and how it compares with a paid Microsoft Copilot license. For side-by-side comparisons with other vendors, see our pages on Copilot vs ChatGPT and Gemini vs Microsoft 365 Copilot; this page does not repeat those tables.

What enterprise data protection actually is

Enterprise data protection is Microsoft's name for the controls and commitments in the Microsoft Products and Services Data Protection Addendum (DPA) and the Microsoft Product Terms that apply to Copilot Chat and Microsoft Copilot, with Microsoft acting as a data processor. In plain terms, your prompts and Copilot's responses are covered by the same contract that already covers your email in Exchange and your files in SharePoint. Microsoft says EDP is available in Copilot Chat at no extra cost. That is a contractual and technical commitment, not a promise that any particular use is safe: what employees choose to put into a prompt is still your decision.

It only applies when the user is signed in the right way. Microsoft says Copilot Chat is available at no extra cost to eligible users who sign in with a Microsoft Entra work or school account and have a qualifying Microsoft 365 subscription, such as Microsoft 365 Business Basic, Business Standard, Business Premium, E3 or E5. Microsoft shows that EDP applies with a green shield at the top of the Copilot Chat window, and the Copilot app adds a "Work" label under the user's profile and a different background color for the work experience. If an employee does not see the shield, they should check which account they are signed in with before typing anything sensitive.

Microsoft also notes that the specific controls and policies vary with the underlying subscription plan. The contract terms are the same, but what your admins can do with retention, labels and audit depends on what your Microsoft 365 plan includes.

What is covered, and what is not

The table lists the parts of a Copilot Chat conversation and whether Microsoft's enterprise data protection applies to each. Each row cites the Microsoft Learn page it comes from, numbered as in the source list at the end of the page.

Microsoft Copilot Chat: what enterprise data protection covers
Part of the conversation	Covered by enterprise data protection?	What Microsoft says	Source
Prompts and responses (work account)	Yes	Covered by the DPA and Product Terms with Microsoft as data processor, and processed within the Microsoft 365 service boundary.	[1] [2]
Use of your data to train AI models	Covered: no training	Prompts and responses are not used to train the underlying foundation models.	[1] [2]
Files a user uploads	Yes	Uploaded files are stored in the user's OneDrive for Business as part of enterprise data protection.	[2]
Your permissions and sensitivity labels	Yes	Copilot respects your identity model and permissions, inherits Microsoft Purview sensitivity labels, and does not grant access to content a user cannot already open.	[1] [3]
Audit and eDiscovery	Yes	Prompts and responses are logged and stored in Exchange for audit and eDiscovery. Copilot interactions are logged as part of Audit (Standard) when auditing is turned on for your organization.	[2] [8]
Retention	Yes, once you set a policy	Microsoft Purview retention policies can retain or delete Copilot Chat messages. Closing a chat does not remove messages, but users can delete a chat where that option is available. What users see in the app is not an accurate record of what is retained.	[7]
Web search queries sent to Bing	No	Handled by Bing under the Microsoft Services Agreement, with Microsoft as an independent data controller and outside the DPA. Explained in the next section.	[1] [6]
Personal Microsoft account	No	The Copilot app accepts work or school accounts and personal Microsoft accounts. Chats, files and protections stay separate by account, and Microsoft describes enterprise data protection as applying to eligible work and school accounts.	[3] [4]
Agents	Depends on the agent	Microsoft says to check each agent's privacy statement and terms of use to see how it handles your organization's data.	[1]

Checked on October 19, 2026 against the Microsoft Learn pages in the source list. Microsoft updates these pages often, so confirm the current wording before you rely on it.

The gaps that matter: web search, personal accounts and agents

Web search is the gap most people miss. When web search is on, Copilot Chat turns parts of a prompt into a short search query and sends it to Bing. Microsoft says the query is a few words, not the whole prompt unless the prompt is very short, and that it carries no user name, domain or tenant ID. It also says terms from an uploaded file can be added to the query if Copilot needs them, although the file itself is not sent. Those queries fall under the Microsoft Services Agreement and Privacy Statement, with Microsoft as an independent controller, and the DPA does not apply to them. Microsoft's Product Terms add separate commitments for these queries, including that they are not used to train foundation models or shared with advertisers, and that they are treated as customer confidential information; where the two conflict, the Product Terms supersede the Microsoft Services Agreement. Microsoft also says HIPAA compliance and the EU Data Boundary do not apply to them. Users can see the exact queries in the citations of a Copilot Chat response for 24 hours, and admins can search them in audit and eDiscovery.

Personal accounts are the second gap. The Microsoft Copilot app lets people sign in with either a work or school account or a personal Microsoft account, and Microsoft says chats, files and protections stay separate depending on which account is used. An employee who pastes a customer list into Copilot while signed in with a personal account is outside your tenant's enterprise data protection and outside your company's DPA. Microsoft Purview lists the consumer version of Microsoft Copilot as a separate "other AI app" location, not as part of Copilot Chat, and retains its prompts only when a collection policy is set to capture content. Microsoft's own advice is to tell users to sign in with their work account and to look for the shield.

Agents are the third. Microsoft says to read each agent's own privacy statement and terms. Agents grounded in shared tenant data, such as SharePoint, can also give a user without a Copilot license a route to company content: they answer from the sites or files they are connected to, within each user's permissions. Microsoft describes agents with access to organizational content as pay-as-you-go, so they can add cost as well as reach.

None of this makes Copilot Chat unsafe. It does mean that turning on the included Copilot is not a data policy. Someone still has to decide whether web search stays on, which accounts staff may use, which agents are allowed, and what may go into a prompt.

Included Copilot Chat vs a paid Microsoft Copilot license

The protection is the same. Microsoft's own comparison shows enterprise data protection as included in both Copilot Chat and Microsoft Copilot. What a license changes is how much of your company's data Copilot can reach by itself, the Copilot experience inside the Office apps, and how quickly it responds when the service is busy. Microsoft Copilot is included in Microsoft 365 E7 or sold as an add-on to eligible plans; organizations with up to 300 users on eligible Microsoft 365 Business licenses can buy it as Copilot Business.

Copilot Chat without a license is mainly grounded in the web, but company content gets in more ways than many owners expect. Users can paste text or upload a file, and they can type "/" to search for any file they have access to and add it to the prompt. The Word, Excel and PowerPoint agents work on the file a user has open. Copilot Chat in Outlook goes further and looks things up on its own across the user's email, calendar, meetings, chats and a bounded set of files: their OneDrive, frequently visited SharePoint sites, files shared with them and files they have viewed, edited or created. Agents grounded in SharePoint answer from the sites or files they are connected to, within each user's permissions. A paid Microsoft Copilot license adds organization-wide grounding through Microsoft Graph, Work IQ and semantic indexing.

So over-sharing matters even before you buy a license. If a payroll folder is open to everyone, a user without a license can still find it with "/" or through an agent and ask Copilot Chat about it. With a license, Copilot can find it on its own, which makes the problem bigger. Our Microsoft Copilot readiness guide and Microsoft 365 Copilot readiness checklist cover that clean-up.

What changes when you add a paid Microsoft Copilot license
Question	Copilot Chat (included)	Microsoft Copilot (paid license)	Source
Enterprise data protection	Yes	Yes	[3]
How company content reaches Copilot	Outside Outlook, a user brings it in: pasting, uploading, the "/" file search, or a file open in Word, Excel or PowerPoint. Copilot Chat in Outlook and agents can also retrieve content within their limited scope.	Copilot can find it across Microsoft 365 by itself, through Microsoft Graph, Work IQ and semantic indexing, within the user's permissions.	[2] [3]
Copilot inside Word, Excel, PowerPoint and OneNote	Copilot Chat (Basic) users do not get Copilot chat in these apps. Microsoft 365 Copilot (Basic) users get standard access to it.	Full experience with priority access, labeled Microsoft 365 Copilot (Premium) or (Pro).	[3]
Access when the service is busy	Standard access, subject to service capacity.	Priority access, including to advanced reasoning experiences and models.	[3]
Agents	Limited; agents grounded in organizational content are pay-as-you-go.	Access to advanced agents and agent experiences.	[2] [3]

Checked on October 19, 2026 against Microsoft Learn. Prices and the full list of eligible plans are left out on purpose: check Microsoft's license options page, its pricing page and the Product Terms on the day you buy.

Admin settings to check before staff use Copilot Chat

These settings live in Cloud Policy service for Microsoft 365, the Microsoft 365 admin center, Microsoft Edge policies, Microsoft Purview and Microsoft Entra. Write down who owns each one.

Copilot Chat admin settings to review
Setting	Where	Why it matters	Source
Allow web search in Copilot	Cloud Policy service for Microsoft 365. Microsoft's Copilot Chat management page says it also appears in the settings of the Copilot Control System page in the Microsoft 365 admin center.	Decides whether queries go to Bing. Options: enabled in Microsoft Copilot and Copilot Chat; disabled in both; or disabled in Microsoft Copilot Work mode while staying on in Copilot Chat. If you do not configure it, web search is on by default unless optional connected experiences are disabled, which also limits other Microsoft 365 features. In GCC and DoD tenants it is off unless you turn it on. Users can switch off a Web content toggle themselves.	[4] [6]
Personal-account sign-in	Microsoft Entra Tenant Restrictions v2	Microsoft points admins here to manage whether users can sign in with personal accounts. The Tenant Restrictions v2 page says it needs Microsoft Entra ID P1 or P2 and an enforcement method: a corporate proxy, universal tenant restrictions through Global Secure Access, or policy on managed Windows devices. Check your plan before you count on it.	[4] [9]
Copilot Chat in Microsoft Edge	Edge policies EdgeEntraCopilotPageContext and CopilotPageContext	Control whether Copilot can read the open web page or PDF when answering, for work-account and personal-account users respectively. Users signed in to Edge with a work account get enterprise data protection.	[4]
Who can use Copilot Chat	Microsoft 365 admin center: pinning, app management, block access	Unpinning does not remove access. To stop use for some or all users, block access and, if you want, add a link to your company policy on the blocked page.	[4]
Agents	Microsoft 365 admin center, agent and app management	Decide which agents users may use. Agents with access to organizational content are pay-as-you-go, and each agent's own privacy statement and terms apply.	[1] [2] [4]
Audit logging	Microsoft Purview Audit	Copilot interactions are logged as part of Audit (Standard) once auditing is on. Web search query logging lets admins audit and run eDiscovery on the exact queries sent to Bing.	[6] [8]
Retention policy	Microsoft Purview data lifecycle management, location Microsoft Copilot experiences	Sets how long prompts and responses are kept or when they are deleted. Holds and other retention policies can keep messages longer.	[7]
Usage report	Microsoft 365 admin center reports	Shows active users and prompts, so you can see whether Copilot Chat is being used and where.	[4]

Checked on October 19, 2026 against Microsoft Learn. Microsoft says it does not support managing Copilot Chat by blocking domains, URLs or IP addresses at the network level, because that can break other Microsoft 365 apps; use the in-service controls above.

What a sensible rollout looks like

For most small businesses on Microsoft 365, the better move is to allow Copilot Chat on work accounts rather than leave staff using consumer chatbots on terms your company did not sign and cannot manage. Before you announce it, confirm that auditing is on, set a retention policy that matches your records policy, decide on web search, decide which agents are allowed, and tell staff in writing to use their work account and to look for the green shield. Add a short list of data that never goes into any AI prompt, such as passwords and anything a client contract restricts, and decide with your compliance lead whether regulated data such as health information may be used at all.

Then revisit the decision when you consider paid licenses. The contract does not change, but the amount of company data Copilot can find by itself does, and that is when permission clean-up becomes the main job.

Common follow-up questions

Does Microsoft use Copilot Chat prompts to train its AI?

Microsoft says Copilot Chat prompts and responses are not used to train the underlying foundation models when a user is signed in with an eligible work or school account. Web search queries sent to Bing are covered by separate Product Terms commitments, which also say they are not used to train foundation models.

How can an employee tell if enterprise data protection is on?

Microsoft says Copilot Chat shows a green shield at the top of the window, next to the New Chat button, when enterprise data protection applies. The Copilot app also shows a Work label under the user's profile and a different background color for the work experience. If the shield is missing, check which account is signed in before typing anything sensitive.

Can staff use Copilot Chat with patient or other health information?

Microsoft says Copilot Chat supports HIPAA compliance for properly configured implementations, and that web search queries are not covered by its DPA or Business Associate Agreement. Whether your own use is covered depends on your agreement with Microsoft and your configuration, so that is a decision for your compliance officer or counsel. A cautious setup turns web search off for staff who handle health information.

Can we turn off web search in Copilot Chat?

Yes. Admins use the Allow web search in Copilot policy in Cloud Policy service for Microsoft 365 and can apply it to the whole tenant or to groups. With web search off, Microsoft says no queries go to Bing and Copilot Chat answers from the language model alone. Note that one option turns web search off only in licensed Copilot's Work mode and leaves it on in Copilot Chat.

Can Copilot Chat reach our SharePoint files without a license?

Outside Outlook and agents, only when a user brings content in: uploading a file, adding one with the "/" menu, which can find any file they have access to, choosing a suggested prompt with a file, or working on an open file or intranet page. Copilot Chat in Outlook goes further and can look things up on its own across the user's email, calendar, chats and a bounded set of files, including their OneDrive, frequently visited SharePoint sites, files shared with them and files they have viewed, edited or created. Agents grounded in SharePoint answer from the sites they are connected to, within each user's permissions. Fix over-shared files before rollout.

Do we need a paid Copilot license to get enterprise data protection?

No. Microsoft says enterprise data protection is available in Copilot Chat at no extra cost for eligible users signed in with a work or school account on a qualifying Microsoft 365 plan. A paid license adds broader grounding in company data, the full Copilot experience in the Office apps and priority access, not a different data protection contract.

Need help with this?

LAN Service Group reviews your Microsoft 365 tenant before staff start using Copilot Chat: web search policy, personal-account sign-in, agents, audit logging and retention, and the acceptable use policy that tells employees what they may put into a prompt. We do this as your fully outsourced IT team or co-managed alongside your in-house IT staff.

Talk to LAN Service Group LAN Service Group AI services → (888) 281-7243