How Copilot Accesses Data

Microsoft 365 Copilot retrieves only the work content a user already has permission to access, grounded through Microsoft Graph and the semantic index.

Copilot honors sensitivity labels and encryption usage rights when deciding what it can return or summarize, and a semantic index of Graph data improves relevance while preserving each user’s security boundaries.

Related terms

Back to Data Protection & Governance for Copilot