Microsoft Copilot
medium riskGenAI Assistantcopilot.microsoft.com, copilot.cloud.microsoft
Data-handling profile
- Trains on input
- Yes, on the consumer tier (enterprise tier excluded)
- Retention
- Enterprise Data Protection for entra-signed-in commercial users; consumer differs
- Data region
- Global
- Certifications
- ISO 27001SOC 2 Type II
- DPA available
- Yes
- Breach history
- none known
- EU AI Act
- GPAI provider; transparency obligations apply
Sources
Every fact above is drawn from the vendor's public documentation, reviewed by a human, and version-stamped. Monitored daily for changes.
Change history
No material changes recorded since monitoring began.