Microsoft Copilot

Two products behind one name: the consumer web app, and Copilot with enterprise data protection, which is what an Entra sign-in gets you.

What leaks through it

The same hostname serves both tiers, so the network alone will not tell you whether an employee is inside the tenant protections or outside them. Outside them, pasted tenant content is consumer data.

• copilot.microsoft.com

Guardrails once it is inspected

Alectura intercepts only tools it has been tested against. Everything else is discovered, meaning you get the app, the devices running it and how often, but the content is never decrypted, so content rules cannot run on it yet.

Today Microsoft Copilot is discovered: you get the app, the devices running it and how often, without decrypting anything. The rules below are the ones that apply to it, and they run once it is onboarded for inspection.

• MaskNo secrets in inputALC-001

  Keys in pasted scripts and config are masked regardless of which tier the person is signed in to.

• AlertDenied topicsALC-004

  Tenant codenames and classification words in pasted content, which is the practical way to spot tenant documents leaving through a consumer sign-in.

• AlertPII in input (basic)ALC-006

  Personal data in a pasted record, with the finding tied to the device and the user.

Those are the ones worth spelling out for Microsoft Copilot. All 27 rules in the catalog apply, and you can see the full catalog.

What happens to whatever gets through

Model training

Prompts and responses under enterprise data protection are not used to train foundation models. The consumer tier is governed by the Microsoft Services Agreement instead.

Retention

Enterprise-protected interactions are stored in the tenant and follow Purview retention. Consumer history follows the personal Microsoft account settings.

Data residency

Tenant-region for the enterprise tier via the EU Data Boundary where applicable.

The vendor’s own controls

• ·Entra ID conditional access
• ·Purview retention, eDiscovery and audit
• ·DLP policies applied to Copilot interactions

Sources

• Copilot data privacy and security

Vendor terms last checked August 14, 2026, and summarised from Microsoft’s published documentation. Confirm against the sources above before writing policy around this page.