Microsoft Copilot to Add Enterprise Data Protection Capabilities for Entra Accounts

Key Takeaways:

• Microsoft Copilot is getting an update that includes enterprise data protection (EDP) capabilities for users with Entra accounts.
• Microsoft assures that Copilot won’t use user data for training AI models, and all access controls and policies set by organizations will be applicable.
• Microsoft has introduced a new ad-free user interface tailored for work and school accounts.

Microsoft Copilot will add enterprise data protection (EDP) capabilities for users with Entra accounts next month, offering robust security features at no additional cost. This update will not only bolster data privacy and compliance but also introduce an ad-free interface tailored for work and educational environments.

Microsoft Copilot is an AI assistant that helps users create content, find information, and generate images, among other tasks. It provides free access to OpenAI’s GPT-4 and DALL-E 3 models through a web browser, allowing users to access web data. On the other hand, Copilot for Microsoft 365 not only accesses web data but also integrates with Microsoft Graph and Microsoft 365 apps.

“EDP refers to controls and commitments, under the Data Protection Addendum and Product Terms, that apply to customer data for users of Copilot for Microsoft 365 and Microsoft Copilot. This means that security, privacy, and compliance controls and commitments available for Copilot for Microsoft 365 will extend to Microsoft Copilot prompts and responses,” Microsoft explained.

What are the advantages of enterprise data protection?

Microsoft emphasized the key benefits of enterprise data protection in its Copilot service, which helps safeguard customer data through encryption, tenant data isolation, and stringent physical security measures. These features are designed to prevent unauthorized access, data breaches, and other security threats. Microsoft also assures that user prompts and responses will not be used to train the underlying large language model (LLM).

Additionally, Microsoft guarantees that the Copilot AI assistant will not access, use, or share users’ data without their explicit permission. The company also says that all access controls and policies configured by an organization will be applied to Microsoft Copilot. Enterprise data protection is designed to mitigate AI security risks, including prompt injection and harmful content.

Pinning Microsoft Copilot

Microsoft has launched an ad-free Copilot interface specifically for work and school accounts. It provides users with new prompt examples tailored to work and educational needs. Additionally, a new setting allows administrators to pin Copilot to app navigation bars via the Microsoft 365 admin center. This setting is for customers who don’t have Copilot for Microsoft 365 subscription.

Microsoft advises administrators to enable in-app access by pinning Copilot for end users within their organizations. In mid-September, the AI assistant will be available within the Microsoft 365 app, with support for Microsoft Teams and Outlook rolling out in the coming months.