Last checked:

DPAs › Microsoft Copilot

Microsoft Copilot DPA

We confirmed a DPA for: Microsoft Copilot Microsoft 365 Copilot (Business). Plans marked "unknown" may still offer one; we just couldn't confirm it on an official page.

PlanGradeDPASOC 2Trains by default
Microsoft 365 Copilot (Business)Ayes (Microsoft Data Protection Addendum)unknown (Office 365 has SOC 2 Type 2; Copilot scope not confirmed)no
older app (personal account)Cunknownunknownyes unless you opt out (older Copilot app; some groups, e.g. signed-out users and under-18s, excluded)
new app since Aug 18, 2026 (personal account)Bunknownunknownno (prompts, responses and files aren't used to train foundation models)

Sources: Microsoft 365 Copilot (Business) · older app (personal account) · new app since Aug 18, 2026 (personal account)

More on Microsoft Copilot

Read past issues of The Safe-to-Use Brief