Microsoft 365 Copilot
Microsoft 365 Copilot brings CRM data into Outlook and Teams.
Overview
- Transparency
- 7 / 10
- Trust
- 92 / 100
Trains on your data
- Free
- No
- Paid
- No
- Opt-out
- Yes
Incidents
4- mediumCVE-2026-55946 - Vulnerability Details - OpenCVE
- mediumCritical Copilot vulnerability allowed hackers to steal 2FA code from users
- mediumMicrosoft finally patches critical one-click Copilot vulnerability, almost eight months after learning of it
Assessed SEP 21, 2026 · Checked by hand SEP 21, 2026
Microsoft confirms no foundation-model training for current consumer and business Copilot, four compliance frameworks, scoped provider ZDR and four distinct remediated vulnerabilities.
Trust breakdown
92 / 100
Overall trust score
Data and privacy
Trains on your data
No training on user data
Storage regions
Sub-processors
Not disclosed
Data retention
OpenAI offers Zero Data Retention for the Responses API used by Microsoft, subject to the limitations and feature-specific data handling practices for Responses API described in OpenAI's Data controls in the OpenAI platform documentation.
Deletion: Your users can delete their Copilot activity history, which includes their prompts and the responses Copilot returns, by going to the My Account portal.
Incidents
2026-09-17
Microsoft Security Response Center
2026-06-16
2026-06-04
2026-03-12
mediumNVD-CVE-2026-26133Microsoft Security Response Center
Powered by
Microsoft Copilot leverages a combination of AI models from third-party providers like OpenAI and Anthropic, as well as its own internally developed and hosted models. The specific model used can vary depending on the task and user settings, with real-time model routing to select the most appropriate model.
Integrations and access
Integrations
Available on
Pricing
Microsoft 365 Personal
$9.99/mo
For 1 person, 1 TB of secure cloud storage, Word, Excel, PowerPoint, and Outlook desktop apps with Microsoft Copilot, Advanced Copilot chat with higher usage than free, higher usage for visual AI assistance, higher usage for AI-generated audio, use Copilot in select apps with work files in a secure way, higher usage for AI image creation, all-day video calling and Copilot in Teams, identity, data and device security.
Microsoft 365 Family
$12.99/mo
Everything in Microsoft 365 Personal, plus: For 1 to 6 people (AI subscription owner only), each person can use on up to 5 devices simultaneously, up to 6 TB of secure cloud storage (1 TB per person).
Microsoft 365 Premium
$199.99/year
Everything in Microsoft 365 Family, plus: Advanced Copilot chat with extensive usage, extensive usage for visual AI assistance, extensive usage for AI-generated audio, access to Copilot features currently exclusive to Premium & Pro, limited usage for agentic AI that gets things done for you including advanced research and analytics, extensive usage for AI image creation.
Microsoft 365 Pro
Not disclosed
Everything in Microsoft 365 Premium, plus: Advanced Copilot chat with highest usage, highest usage for agentic AI that gets things done for you including advanced research and analytics, highest usage for visual AI assistance, highest usage for AI-generated audio.
Microsoft 365 Copilot
Custom
Microsoft 365 Copilot is available for $30.00 user/month, paid yearly (annual subscription–auto renews). A separate license for a qualifying Microsoft 365 plan is required. Also, Microsoft 365 Copilot Chat is available at no additional cost for all Microsoft Entra account users with an eligible Microsoft 365 subscription. An Azure subscription is required to use agents. Prepaid Microsoft Copilot Studio capacity packs are also available.
Prices as listed on SEP 21, 2026; check the vendor's page.
Moat and openness
Moat
- Proprietary Model
- Proprietary Data
- Network Effects
- Switching Costhigh
- Unique UX
- Distributionhigh
Microsoft Copilot benefits from a strong distribution advantage through its deep integration with the ubiquitous Microsoft 365 ecosystem, creating high switching costs for existing enterprise users. While it leverages third-party models, its proprietary model routing, unique UX, and access to vast proprietary user data within Microsoft 365 applications contribute significantly to its defensibility, moving it beyond a mere API wrapper.
Openness
- Open model weights
- Published research
- Open source contributions
- Transparency reports
- Public safety evals
Microsoft demonstrates moderate openness through its commitment to publishing transparency reports, including a dedicated Responsible AI Transparency Report, and its active participation in open science initiatives. They also contribute to open-source projects and provide data summaries and model cards for some of their AI models, such as MAI-Image-1 and Phi-4-Reasoning. However, they do not appear to openly release model weights or public safety evaluations for all their AI models.
Timeline
- 2024-05Microsoft launched Copilot+ PCs, a new category of Windows 11 laptops optimized for on-device AI with powerful Neural Processing Units (NPUs). A flagship feature introduced with these devices was Recall, an AI-driven capability.
- 2024-05Microsoft released Copilot Studio, empowering businesses to build custom 'mini-Copilots' using a low-code or no-code interface.
- 2023-11Microsoft 365 Copilot became generally available for enterprise customers on November 1, along with Microsoft 365 Chat, a new AI assistant.
- 2023-11Bing Chat and Bing Chat Enterprise were rebranded as Microsoft Copilot to simplify the user experience.
- 2023-09Microsoft announced Copilot, unifying various AI capabilities into a single experience available in Windows 11, Microsoft 365, Edge, and Bing. It began rolling out in its early form as part of a free update to Windows 11 on September 26.
Company
Microsoft
- Founded
- 1975
- HQ
- Redmond, Washington, U.S.
- Site
- microsoft.com
Popularity
150M
monthly visits
Notable customers
Microsoft Copilot holds a smaller but strategically significant share of the AI chatbot market, with an 11.5% paid subscriber share as of January 2026, trailing ChatGPT and Google Gemini.
Value and ROI
What it should move: It reduces seller administration and improves CRM records.
Best fit
It fits Microsoft 365 teams that use Salesforce or Dynamics as their CRM.
The catch
Sellers need to use Copilot's active CRM connection; check their CRM work when assessing adoption.
- KPN: Uses Microsoft 365 Copilot for Sales with its CRM to support marketing and sales productivity.[1]
In our stacks for
References
- 01KPN: how it uses Microsoft 365 CopilotMicrosoftVendor-published
- 02Privacy policyMicrosoftVendor-published
- 03TermsMicrosoftVendor-published
- 04Acceptable useMicrosoftVendor-published
- 05Trust centerMicrosoftVendor-published
- 06Pricing pageMicrosoftVendor-published
- 07Company siteMicrosoftVendor-published
- 08SOC 2MicrosoftVendor-published
- 09GDPRMicrosoftVendor-published
- 10CVE-2026-55946 - Vulnerability Details - OpenCVEMicrosoft Security Response CenterIndependent
- 11Critical Copilot vulnerability allowed hackers to steal 2FA code from usersArs TechnicaIndependent
- 12Microsoft finally patches critical one-click Copilot vulnerability, almost eight months after learning of itComputerworldIndependent
- 13NVD-CVE-2026-26133Microsoft Security Response CenterIndependent