How does Microsoft Copilot protect my data?

How does Microsoft Copilot protect my data?

Overview:

Microsoft Copilot - whether you’re using Copilot Chat (Basic) or M365 Copilot (Premium) - is designed to safeguard your data under UAlbany’s enterprise security and compliance standards..

Key Protections:

  • Enterprise-grade security: When signed in with your UAlbany account, all prompts, responses, and uploaded files are protected by Microsoft 365’s enterprise data protection.

  • Encryption and compliance: Microsoft Copilot encrypts and protects user and business data. Prompts and responses may be logged and retained for audit, eDiscovery, and Microsoft Purview compliance, in accordance with university policy.

  • File storage and control: Uploaded files are stored in your OneDrive for Business, where you retain full control and can delete them at any time.

  • No training on your data: Copilot does not use your prompts, responses, or files to train Microsoft’s AI models. Microsoft has no eyes-on access to your data beyond what’s required for enterprise compliance.

  • Respect for existing permissions: Copilot only accesses data you already have permission to view. It does not grant new access to emails, files, chats, or calendars.

  • User-controlled sharing:

    • In Copilot Chat (Basic), you choose what to share by pasting or uploading content.

    • In M365 Copilot (Premium), the AI can access your mailbox, calendar, OneDrive, and Teams content - but only within the scope of your existing Microsoft 365 permissions.

How to confirm you’re protected: