Enterprise customers rightly ask: does Microsoft use my company's data to train its AI? The answer is no — with important nuances.

Microsoft's M365 Copilot Privacy Commitments

• Your data is not used to train foundational models
• Copilot only accesses data the user already has permission to see
• All data stays within your Microsoft 365 tenant
• Responses are not stored or used for training

What You Should Still Do

• Review SharePoint permissions — Copilot surfaces data users can access, so over-permissioned sites become a risk
• Train employees on what to include in prompts
• Use Microsoft Purview to classify sensitive data

Reference:

M365 Copilot privacy documentation

https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy