Microsoft 365 Copilot

1. 01Microsoft 365 Copilot is in use by 12 people across Word, PowerPoint, Excel, BizChat, Teams, Outlook. It respects existing permissions, so oversharing in SharePoint becomes AI-discoverable content. Run a permissions review with Restricted SharePoint Search or SharePoint Advanced Management.
2. 02Copilot surfaced 4 labeled resources. Confirm your sensitivity labels carry the Copilot exclusion where they should, and review Purview DSPM for AI.
3. 03Plugins in use: BingWebSearch. Web search and third-party plugins send prompts outside the tenant boundary; disable them in the Copilot admin settings if that is not intended.
4. 04Adoption is broad enough that outright blocking will disrupt work. Prefer a sanctioned alternative plus Conditional Access.

• ◆High60Microsoft 365 Copilot: sensitive dataPurview DLP2 people

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. copilot_interaction · Sep 14, 2026
   Audit log: Microsoft 365 Copilot, 70 events, 12 people, in Word, PowerPoint, Excel, BizChat, Teams, Outlook, 12 resources accessed (4 labeled) in 30 days
   Detail

   {
     "hosts": [
       {
         "host": "Word",
         "count": 15
       },
       {
         "host": "PowerPoint",
         "count": 14
       },
       {
         "host": "Excel",
         "count": 12
       },
       {
         "host": "BizChat",
         "count": 11
       },
       {
         "host": "Teams",
         "count": 11
       },
       {
         "host": "Outlook",
         "count": 7
       }
     ],
     "teams": [],
     "plugins": [
       {
         "count": 4,
         "plugin": "BingWebSearch"
       }
     ],
     "operations": [
       {
         "count": 70,
         "operation": "CopilotInteraction"
       }
     ],
     "labelledResources": 4
   }