Copilot confidentiality

Copilot data Processing and Storage

• Where is the data processed during a Copilot session?
• Is the data stored? If so – where, for how long, who has access?
• Are prompts, responses, or document contents retained by Microsoft in any form?
• Are these interactions logged or auditable via Microsoft Purview, audit logs or other tools?
• What exactly happens when a user attaches or uploads a document in Copilot Chat?
  • Is the document uploaded to OneDrive or another location?
  • If it is stored – for how long, who has access?
  • Is the content encrypted in transit and at rest?
• What happens if a user attaches to Copilot chat a document that has a sensitivity label attached?
• What are Microsoft’s official best practices for handling sensitive data in Copilot?
• Are there any specific user training, materials, admin guides, or configuration checklists available?
• Where can we find the most up-to-date documentation on this topic?

Are there any differences in the above-mentioned subjects between copilot chat and copilot 365?