Product and intended use
Define the configuration, people, information and tasks being assessed.
Plan in scope
Public claim only
This profile covers Microsoft 365 Copilot for organisations (USD 30 per user per month, annual, auto-renews) plus Copilot Chat (included with eligible Microsoft 365 Entra subscriptions). Legal Agent for Word was announced 30 Apr 2026. Copilot Studio agents and metered connectors are extra. Consumer Copilot and Copilot Studio as a standalone product need separate review.
Ask: Confirm whether we are licensing Microsoft 365 Copilot, Chat-only, Legal Agent for Word, and which Copilot Studio agents.
Deployment
Public claim only
Runs inside Microsoft 365 (Word, Outlook, Teams, Excel, PowerPoint). Copilot is a covered workload in Microsoft data-residency commitments (from 1 Mar 2024). Advanced Data Residency and Multi-Geo include Copilot. Customers outside the EU may have queries processed in the US, EU or other regions. Anthropic-hosted models are excluded from the EU Data Boundary.
Ask: What is our Microsoft 365 geo, is ADR/Multi-Geo in place, and will Anthropic or OpenAI model routes be enabled?
Legal Agent and grounding
Public claim only
Legal Agent in Word is described as generating redlines and reviewing counterparty changes with structured legal workflow. Copilot grounds on Microsoft Graph content the user can already access. It is not a licensed Australian primary-law research product.
Ask: Is Legal Agent for Word in our SKU, and does it cite Graph documents versus the model’s general knowledge?
Australia
Public claim only
Microsoft has an Australian commercial presence and AU datacentres for Microsoft 365. Copilot query processing for non-EU customers may still leave Australia. Confirm ADR for our tenant.
Ask: Will Copilot prompts and grounding data stay in Australia for our tenant, including any Anthropic/OpenAI route?
Adoption and implementation
Record the practical work needed to introduce and maintain the software.
Pricing
Public claim only
Published USD 30 per user per month, paid yearly, annual subscription that auto-renews. Requires a qualifying Microsoft 365 licence. Copilot Chat is included at no extra seat cost for eligible Entra users. Agents require Azure or Copilot Studio capacity packs.
Ask: Quote our user count, qualifying M365 SKU, agent metering, and auto-renewal notice window.
Word, Outlook, Graph, Entra
Public claim only
Native in Word, Outlook, Teams, Excel, PowerPoint. Uses Microsoft Graph with existing permissions. Entra identity, Conditional Access and Purview sensitivity labels apply. Overshared Graph content is still visible to Copilot.
Ask: Demonstrate permission inheritance, label honouring, and that overshared sites are remediable before rollout.
Support
Not confirmed
Microsoft Unified/Premier support is typically contractual via the Microsoft customer agreement. This review did not inspect our specific support SKU.
Ask: What severity response times and Australian-hours coverage apply to Copilot incidents on our agreement?
Data, controls and requirements
Compare the actual configuration with firm, client and jurisdiction requirements, supported by evidence.
Client-facing
Not confirmed
Copilot is an internal Microsoft 365 assistant. It does not present as a lawyer to clients unless the firm pastes output into client communications. No AU client-disclosure template was found.
Ask: How will we disclose Copilot use to clients where outside-counsel guidelines require it?
Model providers
Public claim only
Microsoft Copilot uses Microsoft-hosted models. Admins can enable Anthropic and OpenAI models as subprocessors; additional terms apply. Anthropic routes are currently excluded from the EU Data Boundary.
Ask: Which model providers are enabled in our tenant, and can we restrict Copilot to Microsoft-hosted models only?
Subprocessors
Public claim only
Microsoft Online Services subprocessors plus optional Anthropic and OpenAI AI subprocessors. Web search (Bing) has separate controller terms outside the Microsoft DPA and EU Data Boundary (as described in Copilot web-search documentation referenced from the privacy article).
Ask: Provide the current Copilot-specific subprocessor list and confirm Bing/Anthropic/OpenAI on or off.
Training
Public claim only
Prompts, responses and Graph data are not used to train foundation LLMs used by Microsoft Copilot. Same statement for connected-experience personal data.
Ask: Confirm this no-training commitment is in our Microsoft Product Terms for Copilot, including optional Anthropic/OpenAI routes.
Feedback
Public claim only
Optional customer feedback may be used to improve Copilot like other Microsoft 365 services, but Microsoft states it is not used to train foundation LLMs. Admins can manage feedback.
Ask: Disable optional Copilot feedback for our tenant if we do not want interaction content leaving the productivity-improvement channel.
Retention
Public claim only
Prompts and responses are stored as Copilot activity history, encrypted, aligned with other Microsoft 365 content commitments. Retention can be managed with Microsoft 365 retention policies; exact default period should be confirmed in Purview.
Ask: What is the default Copilot activity-history retention in our tenant and can we set 30 days?
Deletion
Not confirmed
Microsoft 365 DPA and Product Terms govern deletion on exit. This review did not extract a Copilot-specific certified-deletion clause from the DPA viewer scrape.
Ask: Confirm Copilot prompts, responses, embeddings and agent logs are deleted with our Microsoft 365 data on instruction and on tenant offboarding.
Vendor access
Public claim only
Microsoft describes physical security, background screening and layered encryption. Support access follows Microsoft 365 Online Services practices (Customer Lockbox available on eligible SKUs — confirm if purchased).
Ask: Is Customer Lockbox in our SKU for Copilot-related support access?
Identity
Public claim only
Entra ID, Conditional Access, MFA, sensitivity labels and usage rights. Agents may be blocked from encrypted content depending on usage rights.
Ask: Require compliant devices and MFA, and show that a disabled Entra user loses Copilot immediately.
Encryption
Public claim only
Service-side encryption at rest and in transit (BitLocker, per-file encryption, TLS, IPsec). Purview labels honoured. Customer Key is a Microsoft 365 add-on — confirm Copilot coverage.
Ask: Does Customer Key / Double Key Encryption cover Copilot interaction stores?
Assurance
Public claim only
Microsoft documents GDPR, ISO 27001, HIPAA and ISO/IEC 42001 for Copilot. SOC reports are available under NDA via Microsoft compliance portal. Reports not inspected here.
Ask: Provide current SOC 2 / ISO 27001 / ISO 42001 scope statements covering Microsoft 365 Copilot and Legal Agent.
Contract
Public claim only
Microsoft Customer Agreement / Enterprise Agreement plus Products and Services DPA. Copilot is an Online Service under those terms. Exact liability cap and forum follow the firm’s Microsoft agreement, not a Copilot-specific MSA.
Ask: Confirm Copilot is listed as an Online Service on our DPA and whether web search is excluded.
Transfers
Public claim only
ADR/Multi-Geo and EU Data Boundary can apply. Non-EU queries may be processed in US/EU/other regions. Anthropic models excluded from EU Data Boundary. Bing web queries can leave the DPA boundary.
Ask: Map APP 8 for Graph grounding, Copilot processing, Anthropic/OpenAI routes and Bing.
Incidents
Not confirmed
Microsoft Online Services incident process applies. The DPA viewer scrape did not yield a readable 72-hour clause in this review; inspect the signed DPA.
Ask: Confirm Copilot incidents are notified under our Microsoft DPA with NDB-usable content.
Changes
Public claim only
Microsoft may add model providers and agents. Legal Agent launched Apr 2026. Annual auto-renewal on the published Copilot plan. Admins can disable third-party models.
Ask: What notice before a new model provider is enabled by default in our tenant?
Exit
Not confirmed
Microsoft 365 offboarding and data export tools should include Copilot activity history if it is stored as customer content. Confirm with a trial export.
Ask: Show export of Copilot activity history and deletion after we remove the Copilot add-on.
Connectors and agents
Public claim only
Graph is the primary connector. Copilot Studio connectors and agents are metered. Admins control agent use. Encrypted content may block agents.
Ask: List enabled agents and connectors and confirm unused ones are off.
Web search
Public claim only
Copilot Chat can use web grounding. Microsoft documents that Bing-generated web queries have separate treatment. Disable web for privileged workspaces if required.
Ask: Can we disable web search tenant-wide for Copilot while leaving Graph grounding on?
Agents
Not confirmed
Copilot Studio and Word Legal Agent can edit documents. Admins manage who can use agents. No independent kill-switch beyond Entra disable and agent admin was documented.
Ask: Do Legal Agent redlines require explicit accept-as-tracked-changes, and how do we stop an in-flight agent?
Oversight
Public claim only
Microsoft tells users to review, fact-check and adjust content. Activity history stores prompts, responses and citations. Admin Copilot reports exist.
Ask: Can we export Copilot usage and activity to our SIEM for supervision?
