Where it runs
Your Microsoft 365 tenant
Prompts and responses are stored in each person’s mailbox, under the same commitments as other Microsoft 365 content.10
Enterprise AI · Microsoft 365 Copilot
We get your Microsoft 365 data ready for Copilot, set it up, join it to your systems, and coach each team until it is part of the work.
Updated

Microsoft 365 Copilot runs inside your Microsoft 365 tenant and shows each person whatever they can already open.1 It is $30 a user a month on top of a qualifying Microsoft 365 plan.2, 3 So most of the work comes before the license: permissions cleaned up so the right people see the right things, then the rollout, then each team on its own work.
In Microsoft’s own order, with where each step trips companies up and what we do about it.
Run Microsoft’s Copilot Optimization Assessment for data governance readiness.11
Fix oversharing, set guardrails and meet your regulations, following Microsoft’s secure and governed foundation blueprint.11
Where it trips Copilot shows anything a person can already view. Restricted Content Discovery hides a site while it is reviewed, but it changes no permissions, covers SharePoint and not OneDrive, and can take over a week on sites of 500,000 items or more.6 And until sensitivity labels are on for SharePoint and OneDrive, Copilot reaches encrypted files only in Office on Windows.10
What we do We find the overshared sites with Purview’s data risk assessments and SharePoint Advanced Management’s content assessment, fix the permissions, turn on labels, and hold back only what is still under review.5
Get the Microsoft 365 apps and the network ready: requirements, connected experiences privacy settings and endpoints.11
Where it trips Blocking *.cloud.microsoft or WebSockets, or inspecting TLS, breaks the Copilot app, and turning off the connected experiences that analyze content turns Copilot off in Word, Excel, PowerPoint, Outlook and OneNote.4, 1
What we do We go through the network and privacy settings with your IT team before any license is assigned.
Set up Copilot and assign licenses with the setup guide in the Microsoft 365 admin center.11
Send a welcome email, share the in‑product onboarding, link your AI use policy and turn on feedback.11
What we do We do it team by team, with sessions on each team’s own work, rather than with one email to everyone.
What a buyer asks first, from Microsoft’s own pages as read in October 2026.
Where it runs
Prompts and responses are stored in each person’s mailbox, under the same commitments as other Microsoft 365 content.10
Price
$30 a user a month paid yearly, with a qualifying plan.2, 3 Copilot Business lists at $21 for up to 300 users.12, 3 Cowork, Code and some agents bill per use in Copilot Credits.2
Data residency
Copilot is inside the EU Data Boundary and Microsoft’s data residency commitments. Anthropic models and web search queries are outside it.1
Your own keys
Purview Customer Key covers Copilot interactions, but not agents built in Agent Builder.13
HIPAA and FedRAMP
Copilot is in scope for the HIPAA BAA in Microsoft’s Data Protection Addendum, apart from web search queries.14 It is in Office 365’s FedRAMP scope for GCC, GCC High and DoD, with features behind the commercial cloud.15
Audit
Each Copilot interaction is in the unified audit log with no extra setup,16 and Purview covers retention and eDiscovery.10
If your company runs on Microsoft 365, Copilot starts closest to your data: it already sits on your permissions, your mail and your files. It is also the furthest along of the four for federal work.15 It is weaker where the work lives outside Microsoft: MCP tools work only inside agents, not in Copilot on its own,17 and Researcher is capped at 25 queries a person a month.18 Teams that write, analyze or build all day often add Claude Enterprise or ChatGPT Enterprise beside it, and a company on Google Workspace starts with Gemini Enterprise instead. Our comparison sets the four side by side, and where the data can’t leave the building, private AI on your own hardware fits instead.
The way every enterprise AI engagement runs: four stages, one team throughout, starting with a call.
Yes. Copilot shows whatever a person can already open, so overshared sites surface as soon as it is on. SharePoint Advanced Management, included with the Copilot license, drives the cleanup.6, 5
Copilot Chat comes with eligible Microsoft 365 plans at no extra cost, but without a Copilot license it reaches work data only in a file someone uploads, content open in Outlook or Teams, or an agent billed per use.9, 2
Yes, as a subprocessor, on by default in the commercial cloud except in the EU, EFTA and UK. Those models are outside the EU Data Boundary.19
Yes, and it is the most common place we start. We review the setup as it stands, fix what keeps people from trusting it, join it to your systems, and coach each team on its own work.
We set up all four, and compare them side by side.
Each fact on this page, read from the vendor’s own pages in October 2026.