Microsoft Copilot
Microsoft
Careful
Microsoft's consumer Copilot privacy FAQ says conversation activity can be used for model training and that you can opt out. It also lists people who are excluded, including work or school Entra ID accounts, people who are not signed in, under-18 users, and users in several countries. Copilot inside Microsoft 365 apps is a different promise and is not used to train those models. A personal copilot.microsoft.com chat is Careful until you confirm the training setting.
Last checked 2026-11-10
Data-safety checklist
Trains on your data by default
Unknown
The FAQ says you can opt out of use of conversation activity for model training, and it lists data that is excluded. It does not, in the text we read, say the consumer setting is off by default. It does say organizational Entra ID accounts are not trained on.How to opt out
Steps
Use the model-training opt-out described in the Copilot privacy FAQ. If you are signed in with a work or school account, Microsoft says that conversation is already excluded and points you to enterprise data protection instead.Data retention
What they keep
Unknown. The FAQ describes what is excluded from training and that Microsoft removes identifying information before training. It does not give one retention period for consumer Copilot chats.BAA / HIPAA
No
The consumer FAQ does not offer a BAA. Commercial coverage is described under enterprise data protection for work or school accounts.Certifications
1 listed
- Unknown for the consumer app
Enterprise and admin controls
Controls
None on a personal Microsoft account. Work and school accounts fall under the commercial Copilot terms and admin tools.Sources
2 pages