Microsoft · Conversational AI
Copilot (consumer)
Allow Enterprise Enterprise tier: Available DPA: Yes
Network signatures
Domains: copilot.microsoft.com, www.bing.com/chat, bing.com
SNI patterns: *.copilot.microsoft.com, *.bing.com
Client signatures
Process names: Copilot.exe (Windows)
Mobile apps: Microsoft Copilot iOS; Microsoft Copilot Android
Risk profile (1–5)
- Data exfiltration: 4
- IP loss: 4
- Output quality (hallucination / legal): 3
- Integration risk (OAuth, extensions, agentic): 3
Data egress concerns
- User-entered prompts containing internal data
- Document context shared with Copilot consumer
Training-use default
Consumer Copilot uses Bing infrastructure; conversation use for service improvement is governed by Microsoft's consumer privacy terms. Enterprise Data Protection mode (M365 E3/E5 with Copilot) excludes training use contractually.