Is Microsoft Copilot safe for business data?
Microsoft 365 Copilot at work does not use your prompts, responses, or files to train its foundation models; the free personal Copilot app lets you opt out of model training and keeps conversations for 18 months by default.
Training, plan by plan
- Depends: Copilot app, personal Microsoft account: your choice: you can opt out.
- Not used for training: Microsoft 365 Copilot (work account): not used.
What it does with your data
| Question | Copilot app, personal Microsoft account | Microsoft 365 Copilot (work account) |
|---|---|---|
| Trains on your data by default? | You can opt out. Microsoft says you control whether it can use your conversations to train its generative AI models, and you can opt out at any time. Read on October 23, 2026 · source: support.microsoft.com | No. Microsoft says prompts, responses, and data accessed through Microsoft Graph are not used to train its foundation models. Optional feedback may be used to improve Copilot, and admins can manage it. Read on October 23, 2026 · source: learn.microsoft.com |
| How long chats are kept | 18 months by default. Files you share are kept no longer than 18 months and then deleted automatically. Read on October 23, 2026 · source: support.microsoft.com | Prompts and responses are stored with your organization’s other Microsoft 365 content. Admins can set retention policies for Copilot chats in Microsoft Purview. Read on October 23, 2026 · source: learn.microsoft.com |
| Who can read them | Not described on the page we read. Not confirmed · page checked: support.microsoft.com, October 23, 2026 | Admins can view and manage stored prompts and responses with Content search or Microsoft Purview. Read on October 23, 2026 · source: learn.microsoft.com |
| Where data is stored | Not stated on the page we read. Not confirmed · page checked: support.microsoft.com, October 23, 2026 | For EU customers, Copilot is an EU Data Boundary service. Customers outside the EU may have their queries processed in the US, the EU, or other regions. Read on October 23, 2026 · source: learn.microsoft.com |
| How to delete | Delete one conversation, or your entire conversation history, at any time from your conversation history. Read on October 23, 2026 · source: support.microsoft.com | Each person can delete their Copilot activity history, including prompts and responses, in the My Account portal. Read on October 23, 2026 · source: learn.microsoft.com |
How to turn training off
- In the personal Copilot app, opt out of use of your conversation activity for model training. Microsoft says you can do this at any time. Source: support.microsoft.com
- Delete individual conversations, or your entire conversation history, when you no longer need them. Source: support.microsoft.com
- For a team, have your admin set retention policies for Copilot chats in Microsoft Purview. Source: learn.microsoft.com
Safer setup for a small team
Use Microsoft 365 Copilot signed in with your work account. On the personal Copilot app, opt out of model training and delete old conversations.
Plan to approve: Microsoft 365 Copilot with a work account
Setting to check: Model training opt out (personal app)
A line for your AI policy: Staff may use Copilot for work only while signed in with a company Microsoft 365 account. Customer data never goes into the personal Copilot app.
Want this in your team’s AI policy? The SafeStart kit, a plain-English AI policy and training for small teams, is coming soon.
Questions about your own setup? Write to hello@terrapilgrim.org.
What changed
No changes recorded since we first published this page on October 23, 2026. Every change goes in the change log.
Sources (2)
- support.microsoft.com/en-us/topic/privacy-faq-for-microsoft-copilot-27b3a435-8… · read on October 23, 2026
“Train our generative AI models to create a better experience for you and others. You can opt out of use of your conversation activity for model training at any time.”
- learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy · read on October 23, 2026
“Prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation LLMs, including those used by Microsoft Copilot.”
Related tools
- 3 plans checked
ChatGPT
OpenAI
- Used for training: Free, Plus, and Pro: used, unless you turn it off.
- Not used for training: ChatGPT Business: not used by default.
- Not used for training: ChatGPT Enterprise: not used by default, unless your organization opts in.
Checked October 23, 2026 - 2 plans checked
Claude
Anthropic
- Not used for training: Free, Pro, and Max: not used, unless you allow it.
- Not used for training: Team and Enterprise: not used by default.
Checked October 23, 2026 - 2 plans checked
Gemini
Google
- Used for training: Personal Google Account: used while Keep Activity is on.
- Not used for training: Google Workspace (business accounts): not used without your permission.
Checked October 23, 2026 - 2 plans checked
Grok
SpaceXSI
- Used for training: Grok app and Grok.com (personal): used, unless you turn it off.
- Not used for training: SpaceXSI API (business and enterprise): not used.
Checked October 23, 2026 - 2 plans checked
Perplexity
Perplexity AI
- Used for training: Free, Pro, and Max: used by default, unless you turn it off.
- Not used for training: Enterprise Pro and Enterprise Max: not used.
Checked October 23, 2026 - 1 plan checked
Meta AI
Meta
- Used for training: Meta AI (personal accounts): used, with no opt-out described.
Checked October 23, 2026
Comparisons
Keep browsing
Get the monthly changes
One email each month: what changed, in plain English.
Never shared. Unsubscribe anytime.