There is a lot of noise about AI at the moment, and Microsoft Copilot sits at the centre of it for most businesses on Microsoft 365. Strip the noise away and it is a fairly specific thing — and understanding what that thing is makes it much easier to decide whether it is for you.
What it is
Copilot is an assistant built into the tools you already use — Outlook, Word, Excel, Teams, PowerPoint — that can read, summarise, draft and find things using your own business data. Ask it to summarise a long email thread, draft a reply, pull the key points out of a meeting recording, or build a first version of a document from three bullet points, and it will.
What it can see
Exactly what the person using it can see, and nothing more. Copilot works inside your Microsoft 365 permissions: if you can open a document, Copilot can use it to help you; if you cannot, neither can Copilot. This is the single most important thing to understand, because it cuts both ways. It is why the tool is safe by design — and why messy permissions become visible fast. If a spreadsheet was accidentally shared with the whole company years ago, Copilot will cheerfully find it for anyone who asks.
Where your data goes
For the business version, prompts and responses stay within your Microsoft 365 tenant, under your policies, and are not used to train Microsoft's models. That is a meaningful difference from consumer AI tools that staff may already be pasting company information into — one good reason to give people an approved tool.
What it is not
It is not a replacement for judgement. It drafts; a person decides. It is confident even when wrong, so anything it produces about numbers, dates or commitments gets checked. And it does not fix a disorganised tenant — it reflects it.
The questions to ask before switching it on
- Are our permissions and sharing settings in order? (If unsure, the answer is no — and it is fixable.)
- Is MFA enforced everywhere, and do we have a clean leaver process?
- Do we have a short, written policy on what may and may not go into AI tools?
- Which ten people have repetitive work that a pilot could measurably improve?
We run readiness checks on Microsoft 365 tenants for exactly these questions, and we deliver Copilot on the same environment we already manage — so the security, the permissions and the support are one conversation, not three.
