How does enterprise knowledge safety in Copilot work?
Enterprise knowledge safety is Microsoft's promise to stop the ingestion of delicate knowledge if that knowledge is part of a Copilot question.
One of many major dangers of an AI copilot is {that a} person's question may expose their group's delicate knowledge. In sure conditions, the underlying AI engine may even prepare on that delicate knowledge. Relating to the potential for unintended knowledge publicity, it is essential to know that not all copilots are created equally: Microsoft 365 Copilot was created with knowledge safety and privateness in thoughts, and it's designed to not leak a company's knowledge.
Copilot retains a file of prompts and responses, although that knowledge isn't used to coach Copilot's foundational mannequin. Microsoft refers to these prompts and responses because the content material of interactions, and the data is stored as the person's Copilot interplay historical past. Admins can view and handle customers' Copilot interplay historical past by means of Microsoft Purview, as proven in Determine 1.
Underneath its enterprise knowledge safety (EDP) coverage, Microsoft ensures a company's delicate knowledge isn't uncovered to third-party organizations. It is price noting that Copilot for Microsoft 365 does permit using third social gathering plugins. Microsoft advises customers to evaluation the privateness assertion related to any plugins they could use to make sure that delicate knowledge isn't uncovered by means of the plugin.
Microsoft permits Copilot to make use of plugins when they're required to formulate a response to a person's question. Nonetheless, a company can management which plugins Copilot is allowed to work together with. To view the listing of plugins and their related permissions, customers can open the Microsoft Admin Middle and click on on the Built-in Apps choice discovered inside the Settings part. This display shows which plugins are at present allowed. Customers also can evaluation the plugins' privateness statements and disable a plugin if vital. Determine 2 reveals the Built-in Apps display, although no apps are deployed on this instance.
Earlier than enterprise knowledge safety, Copilot for Microsoft 365 used industrial knowledge safety, a characteristic that customers wanted to activate to get the protections which are promised underneath EDP. Microsoft retired industrial knowledge safety when it rolled out a collection of updates to Copilot in September 2024. EDP protections now are enabled by default.