What do you need to do now and what does Microsoft do for you?

Microsoft

• Tenant Isolation: Copilot operates solely with data from the user’s current Microsoft 365 tenant, ensuring that no data from other tenants, including those where the user is a guest or those with cross-tenant sync, are accessed or used.
• Training Limitations: The LLMs that Copilot uses for all tenants do not incorporate any of your business data for their training. This prevents your proprietary data from appearing in Copilot’s responses to users in other tenants.

Your organization’s responsibilities

• Labeling: Content created by Copilot does not automatically adopt the Microsoft Information Protection (MIP) labels from the source files it references if the labeling configuration is not set up correctly.
• Permission Management: Copilot will display all requested organizational data to users who have viewing permissions.
• Human Oversight: The accuracy and safety of Copilot’s responses are not guaranteed to be correct all the time. We have quickly learned to embrace the output that AI gives us, however it is crucial for human users to review and evaluate AI-generated content.
• Human Training: Learning how to use Copilot safely, write valuable prompts and effectively use AI.
• Implement Continuously Monitoring, auditing and respond to abnormal behavior: Understanding how AI is being used in your organization is of vital essence to keep your data and the safety of your tenant under control.