Last checked:
Comparisons › Microsoft Copilot vs ChatGPT
Microsoft Copilot vs ChatGPT: privacy for business
Microsoft Copilot: Best-graded plan: Microsoft Copilot Microsoft 365 Copilot (Business) (A). Microsoft Copilot Microsoft 365 Copilot (Business) does not train on your data by default. Microsoft Copilot older app (personal account) can use your data for training unless you opt out.
ChatGPT: Best-graded plan: ChatGPT Business (A). ChatGPT Business, ChatGPT Enterprise do not train on your data by default. ChatGPT Free, ChatGPT Plus can use your data for training unless you opt out.
ChatGPT: Best-graded plan: ChatGPT Business (A). ChatGPT Business, ChatGPT Enterprise do not train on your data by default. ChatGPT Free, ChatGPT Plus can use your data for training unless you opt out.
Microsoft Copilot
| Plan | Grade | Trains by default | Human review | Retention | DPA | SOC 2 |
|---|---|---|---|---|---|---|
| Microsoft 365 Copilot (Business) | A | no | no (opted out of Azure OpenAI abuse-monitoring review) | Admin retention policies via Microsoft Purview | yes (Microsoft Data Protection Addendum) | unknown (Office 365 has SOC 2 Type 2; Copilot scope not confirmed) |
| older app (personal account) | C | yes unless you opt out (older Copilot app; some groups, e.g. signed-out users and under-18s, excluded) | yes, no opt-out (older Copilot app) | 18 months by default (older Copilot app); delete chats anytime | unknown | unknown |
| new app since Aug 18, 2026 (personal account) | B | no (prompts, responses and files aren't used to train foundation models) | unknown | unknown | unknown | unknown |
Sources: Microsoft 365 Copilot (Business) · older app (personal account) · new app since Aug 18, 2026 (personal account)
Is Microsoft Copilot safe for business? · Full Microsoft Copilot breakdown
ChatGPT
| Plan | Grade | Trains by default | Human review | Retention | DPA | SOC 2 |
|---|---|---|---|---|---|---|
| Free | C | yes (opt-out available) | unknown | Temporary Chats up to 30 days; regular chats until you delete them, then removed within 30 days (unless already de-identified) | not listed (OpenAI's DPA covers Business, Enterprise, API) | not listed (OpenAI's SOC 2 Type 2 covers the API, ChatGPT Business/Team, Enterprise and Edu) |
| Plus | C | yes (opt-out available) | unknown | Temporary Chats up to 30 days; regular chats until you delete them, then removed within 30 days (unless already de-identified) | not listed (OpenAI's DPA covers Business, Enterprise, API) | not listed (OpenAI's SOC 2 Type 2 covers the API, ChatGPT Business/Team, Enterprise and Edu) |
| Business | A | no | Limited: authorized staff and contractors for support/abuse | Admin-controlled; deleted chats removed within 30 days | yes | yes (Type 2) |
| Enterprise | A | no | Only for incidents, recovery with permission, or legal requirement | Admin-controlled; deleted chats removed within 30 days | yes | yes (Type 2) |
Sources: Free · Plus · Business · Enterprise
Is ChatGPT safe for business? · Full ChatGPT breakdown
The plan matters more than the brand: compare business plan to business plan. How we grade.