Is Gemini for Google Workspace or Microsoft 365 Copilot safer for small business data?

By Hugh Donatello, LAN Service Group · Reviewed October 19, 2026

Short answer

On business plans, both are defensible. Google says Workspace does not use customer data, including prompts, to train models without permission, and Microsoft says Copilot prompts, responses and Microsoft Graph data are not used to train foundation models. Both are built to retrieve only content the signed-in user can already open. The real differences are retention, which plans include each tool, data residency options, and how much admin work each one needs.

A note on names

Google now calls the AI in its business suite Gemini in Google Workspace, and the Gemini app is a core Workspace service on most editions. Google's plan pages call NotebookLM "Gemini Notebook." Microsoft has renamed Microsoft 365 Copilot to Microsoft Copilot and Microsoft 365 Copilot Chat to Microsoft Copilot Chat, and says the security, compliance and privacy terms did not change. This page uses the vendors' current names. It covers business and work accounts only: personal Google accounts and personal Microsoft accounts run on consumer terms, which this comparison does not cover.

Gemini vs Copilot: data protection side by side

The table compares Gemini on a qualifying Google Workspace business edition with Microsoft Copilot and Copilot Chat used with a work account in a Microsoft 365 tenant. Each row cites the vendor document it comes from, numbered as in the source list at the end of the page.

Gemini for Google Workspace vs Microsoft Copilot: data protection terms
Question	Gemini in Google Workspace (business editions)	Microsoft Copilot and Copilot Chat (work account)	Source
Are your prompts used to train the vendor's models?	No, unless you give permission. Google says Workspace does not use customer data for training models without the customer's prior permission or instruction, treats prompts as customer data, and says content is not human reviewed or used for training outside your domain without permission.	No. Microsoft says prompts, responses and data accessed through Microsoft Graph are not used to train foundation models. It also says Copilot services have opted out of the Azure OpenAI abuse monitoring that includes human review.	[1] [4]
Which contract covers your data?	Your organization's Google Workspace agreement, including the Cloud Data Processing Addendum.	The Microsoft Products and Services Data Protection Addendum (DPA) and Product Terms, with Microsoft acting as a data processor.	[1] [5]
Which plans include it?	The Gemini app is a core service on most Workspace editions. On Google's plan page, Business Starter gets basic Gemini app and Gemini Notebook access, Gemini in Gmail and Gemini in Vids. Business Standard, Business Plus and Enterprise add Gemini in Docs, Sheets, Slides, Drive, Meet and Chat.	Copilot Chat with enterprise data protection is available at no extra cost on eligible Microsoft 365 work accounts. Full Microsoft Copilot, which works across your organization's Microsoft 365 data, is included in Microsoft 365 E7 or sold as an add-on. Copilot Business is the add-on for organizations with up to 300 users on eligible plans: Microsoft 365 Business Basic, Standard or Premium, Apps for Business, or Teams Essentials.	[3] [1] [6] [7]
What company data can it reach?	Workspace content the signed-in user already has access to. If a user cannot open a document or email, Google says Gemini will not retrieve it. Exception: files added to Gemini Notebook are copied, and Drive sharing settings do not apply to the copy.	Licensed Microsoft Copilot can reach organizational data the user has at least view permission to. Copilot Chat without a Copilot license is grounded in the web, but users can still bring in company content by pasting or uploading it, by working with content they have open, through Copilot Chat in Outlook (their email, calendar and a limited set of files), or through agents.	[1] [4] [6]
How long are prompts and responses kept?	Gemini in Workspace: 90 days to indefinite, as set by admins, and users can delete conversations unless admins prohibit it. Gemini app: 3, 18 or 36 months as set by admins (default 18 months; up to 72 hours when history is off). Gemini Notebook: prompts and responses are not kept after the session ends; uploaded files and notebooks are kept until deleted.	Interactions are stored with your other Microsoft 365 content under the same contractual commitments. Admins can set Microsoft Purview retention policies for Copilot interactions, and users can delete their Copilot activity history.	[1] [4] [9]
Admin controls	On supported editions, admins can turn Gemini features and the side panel on or off in Gmail, Drive, Docs, Meet and Chat. The Gemini app is on by default and admins can disable it. On supported editions, existing data loss prevention (DLP) rules apply to Gemini output once it is inserted into email, Drive files or Docs; Gemini Notebook is not integrated with DLP.	Admins choose which agents are allowed in the Microsoft 365 admin center, and decide whether to use third-party models such as Anthropic's and OpenAI's. Turning off optional connected experiences can affect whether web search is available.	[1] [4]
Audit trail and eDiscovery	Workspace audit logs cover user interactions with Gemini. Vault manages retention for Workspace data and comes with Business Plus and Enterprise, not Business Starter or Standard.	Copilot interactions are logged automatically in Microsoft Purview Audit when auditing is turned on for the tenant. Copilot Chat prompts and responses are stored in Exchange for audit and eDiscovery.	[1] [3] [8] [6]
Where data is stored and processed	Workspace Data Regions let you keep Gemini app and Gemini in Workspace prompts and responses in the United States or Europe. Fundamental Data Regions (Business Standard, Business Plus and some Enterprise and Frontline editions) cover data at rest only. Enterprise Data Regions (Enterprise Plus, Enterprise Essentials Plus, Frontline Plus, or a paid add-on) and Assured Controls Data Regions also cover data while it is processed. Business Starter is not on Google's list, and Gemini Notebook is not covered by Data Regions.	Copilot has been covered by the data residency commitments in Microsoft's Product Terms since March 1, 2024, and is an EU Data Boundary service for EU customers. Customers outside the EU may have prompts processed in the US, the EU or other regions. Advanced Data Residency and Multi-Geo add residency commitments. Anthropic models, if an admin enables them, are currently excluded from the EU Data Boundary and in-country processing commitments.	[2] [1] [4] [5]
Health data (HIPAA)	Google says Gemini can support HIPAA workloads and that its HIPAA Included Functionality has been updated to include Gemini. Gemini Notebook and Gemini in Chrome are not covered by Google's BAA.	Microsoft says Copilot and Copilot Chat support HIPAA for properly configured implementations. Web search queries are not covered by the DPA or Microsoft's Business Associate Agreement (BAA).	[1] [5]
Web search	In the Gemini app, Google says Search grounding data is encrypted, processed ephemerally, redacted from Search logs and handled under the Cloud Data Processing Addendum. Gemini in Workspace apps uses Google's internal web index within the Workspace security boundary.	Queries go to Bing as a few generated words, with user and tenant identifiers removed. They fall under the Microsoft Services Agreement, with Microsoft acting as an independent data controller, outside the DPA, the BAA and the EU Data Boundary.	[1] [5] [6]
Certifications the vendor lists (not proof your own use is compliant)	FedRAMP High authorization; SOC reports; ISO/IEC 27001, 27701, 27017, 27018 and 42001.	Compliance offerings including GDPR, ISO 27001, HIPAA and ISO 42001.	[1] [4]

Checked on October 19, 2026 against the vendor documents in the source list. Google and Microsoft change these terms and plan contents often, so confirm the current versions before you buy or sign. This table does not cover personal Google or Microsoft accounts, which run on consumer terms. Prices are left out on purpose: check each vendor's pricing page on the day you buy.

Where the two are effectively the same

On the question most owners ask first, whether the vendor trains its AI on our files, the vendors' answers are close. Google's Privacy Hub says Workspace does not use customer data, including prompts, to train models without the customer's permission. Microsoft says prompts, responses and data reached through Microsoft Graph are not used to train foundation models. Both treat your prompts and responses as customer data under the same data processing terms that already cover your email and files.

Both also follow your existing access model. Gemini retrieves only Workspace content the user can already open, and Microsoft Copilot surfaces only data the user has at least view permission to. This is the most important point for a small business, and it cuts both ways. The AI will not break your permissions, but it will expose every file you have over-shared. A folder shared with "anyone in the organization" years ago becomes something any employee can ask about. One Google-side exception is worth knowing: files added to Gemini Notebook are copied, and Drive sharing settings no longer apply to that copy, so who a notebook is shared with decides who can query it.

Where they differ

Retention starts in different places. Google publishes concrete ranges in its Privacy Hub: Gemini in Workspace conversation history runs from 90 days to indefinite, and Gemini app conversations are kept for 3, 18 or 36 months, with 18 months as the default. Admins set both. Microsoft stores Copilot interactions with your other Microsoft 365 content and expects you to govern them with Microsoft Purview retention policies. In both cases the default may not match your records policy, so decide on a retention period before rollout rather than after.

Your plan decides how much of the product you get. On Google's plan page, Business Starter gets basic Gemini app and Gemini Notebook access, Gemini in Gmail and Gemini in Vids, while Gemini in Docs, Sheets, Drive and Meet starts at Business Standard. Vault starts at Business Plus, and data loss prevention appears only on the Enterprise plan. On the Microsoft side, work accounts on eligible Microsoft 365 plans get Copilot Chat with enterprise data protection at no extra cost, and Copilot Chat in Outlook can already reach a user's own mailbox, calendar and some files. Copilot grounded across all your organization's email, files and meetings needs a paid license such as Copilot Business. Do not buy for a feature until you have checked that it is on your edition.

Data residency options differ in shape. Google offers a choice of United States or Europe through Workspace Data Regions, but only Enterprise Data Regions or Assured Controls Data Regions cover Gemini prompts while they are being processed. Fundamental Data Regions, available on Business Standard and Business Plus, cover them at rest only, and Gemini Notebook is not covered at all. Microsoft makes Copilot a covered workload in its Product Terms data residency commitments and keeps EU users inside the EU Data Boundary, except for Anthropic models and web search queries. It says customers outside the EU may have prompts processed in other regions. If a contract or regulator tells you where data may be processed, read the exact commitment for your edition. A residency claim on a marketing page is not enough.

Web search is handled differently. Microsoft is explicit that Bing web queries fall outside its DPA, its BAA and the EU Data Boundary, with Microsoft acting as an independent controller. Google says Search grounding in the Gemini app stays under its Cloud Data Processing Addendum and is encrypted, processed ephemerally and redacted from Search logs, and that Gemini in Workspace apps uses an internal web index inside the Workspace security boundary. If you handle health or other regulated data, decide whether web grounding should be on before rollout, and train staff that putting regulated details in a Copilot prompt can send fragments of them to Bing, outside Microsoft's DPA and BAA.

How to decide

For most small businesses, the decision follows the suite you already run. If your email, files and meetings live in Google Workspace, Gemini works inside the permission model and audit logs you already have, plus DLP if your edition includes it. If they live in Microsoft 365, Copilot does the same with Entra ID and SharePoint permissions, and with the Purview controls your plan includes. Moving suites to get a different AI assistant rarely makes sense on data-protection grounds alone, because the terms that matter most here are broadly similar.

Whichever suite you run, the work that actually protects you is the same. Clean up sharing and permissions before rollout. Confirm your edition includes the AI features, retention controls and data region coverage you need. Set retention to match your records policy. Turn on audit logging. Decide whether web grounding stays on. Write down which data employees may put into the assistant, and whether files may be copied into notebooks or agents. If you run both suites, apply the same policy to both, so staff are not guessing which rules apply in which tool.

Common follow-up questions

Does Google use my Workspace data to train Gemini?

Google's Generative AI in Google Workspace Privacy Hub says Workspace does not use customer data for training models without the customer's prior permission or instruction, and treats prompts as customer data. It also says your content is not human reviewed or used for model training outside your domain without permission. That commitment applies to qualifying Workspace editions, not personal Google accounts.

Can Gemini or Copilot see files an employee is not allowed to open?

Not through normal retrieval. Google says Gemini only retrieves Workspace content the user has access to, and Microsoft says Copilot surfaces only organizational data the user has at least view permission to. One exception on the Google side: files added to Gemini Notebook are copied, and Drive sharing settings no longer apply to that copy, so who a notebook is shared with decides who can query it. The bigger practical risk is over-sharing: anything a user can technically open, the assistant can find and summarize.

Does Google Workspace Business Starter include Gemini?

Partly. Google's plan page lists basic Gemini app and Gemini Notebook access, Gemini in Gmail and Gemini in Vids for Business Starter. Gemini in Docs, Sheets, Slides, Drive, Meet and Chat starts at Business Standard, and Vault starts at Business Plus. Plan contents change, so check Google's current plan comparison before you buy.

Is Copilot Chat the same as Microsoft Copilot?

No. Copilot Chat comes with enterprise data protection at no extra cost on eligible work accounts. It is grounded in the web, plus content the user pastes, uploads or has open, and in Outlook it can also use the user's email, calendar and a limited set of files. Microsoft Copilot, a paid license such as Copilot Business for organizations with up to 300 users, works across all the organization's data the user can access.

Which one keeps AI data in the United States?

Google Workspace Data Regions can keep Gemini app and Gemini in Workspace prompts and responses in the United States or Europe. Business Standard and Business Plus cover data at rest only; processing is covered only with Enterprise Data Regions or Assured Controls Data Regions, and Gemini Notebook is not covered. Microsoft covers Copilot in its Product Terms data residency commitments, but says customers outside the EU may have prompts processed in the US, the EU or other regions.

Need help with this?

LAN Service Group reviews Google Workspace and Microsoft 365 sharing, retention and audit settings before an AI rollout, configures Gemini or Copilot admin controls, and writes the policy that tells employees what data each assistant may see. We do this as your fully outsourced IT team or co-managed alongside your in-house IT staff.

Talk to LAN Service Group LAN Service Group AI services → (888) 281-7243