---
title: Microsoft Copilot in a family office, what it can see and who sets that up
description: Microsoft Copilot for family offices sees what each user can open in email and files. See why permissions decide it, and who sets them up before staff use it.
canonical: https://privatesuperintelligence.si/blog/copilot-for-family-offices/
last-updated: 2026-10-15
---

# Microsoft Copilot in a family office, what it can see and who sets that up

Microsoft Copilot (previously Microsoft 365 Copilot) can see the emails, chats, documents, calendars, meetings and contacts in your Microsoft 365 tenant that the person asking already has at least view permission for. Microsoft does not train its foundation models on your prompts, responses or tenant data. So the real question for a family office is who in your tenant can open what, and Microsoft's own guidance puts fixing that on your admins before rollout.

## What Copilot does well

Microsoft's privacy documentation, updated in 2026, makes these commitments:

- **No training on your data.** "Prompts, responses, and data accessed through Microsoft Graph aren't used to train foundation LLMs, including those used by Microsoft Copilot."
- **Grounding in your own work.** Copilot combines your documents, emails, calendar, chats, meetings and contacts with your working context, such as the meeting you are in or last week's email thread on the same topic.
- **No human abuse review.** Azure OpenAI offers abuse monitoring that includes human review of content, and Microsoft says Copilot services have opted out of it.
- **Existing commitments carry over.** Copilot sits under Microsoft 365's privacy, security and compliance commitments, including GDPR and the EU Data Boundary, and Microsoft lists ISO 27001, HIPAA and ISO 42001 among its compliance offerings.
- **Encryption and labels respected.** Content is encrypted at rest and in transit, and when a file is protected by a Microsoft Purview sensitivity label, Copilot honors the usage rights granted to the user.
- **Prompt injection defenses.** Microsoft describes classifiers that analyze inputs and help block jailbreak and cross-prompt injection attacks before the model runs.

If your office already runs on Microsoft 365, Copilot works inside the email and files your team uses every day, and Microsoft stores Copilot's records under the same contractual commitments as your other Microsoft 365 content.

## What Copilot can see in your tenant

Microsoft's key sentence: "Microsoft Copilot only surfaces organizational data to which individual users have at least view permissions." Its semantic index honors each user's access boundary. In practice, Copilot can reach:

| Source | What Microsoft says |
| --- | --- |
| Email, chats, documents, meetings, calendar, contacts | Anything in Microsoft Graph the user can access |
| SharePoint and OneDrive | Content governed by SharePoint permissions, including sharing links |
| Shared channels in Teams | Includes access you grant to people outside your organization |
| Graph connectors | Data from third-party systems, returned if the user has permission to it |
| Agents | A query built from the prompt, Copilot activity history and the user's Microsoft 365 data, sent to agents your admin allows |
| Web search | Copilot generates a search query from the prompt and sends it to Bing |

Copilot works within each person's existing access, and it makes that access much easier to use. Picture the office's SharePoint: a trust administration folder shared with the whole company when it was created, a sharing link sent to an outside accountant three years ago, a site for a sold operating company that nobody owns any more. Before Copilot, a junior analyst would have to go looking. With Copilot, a question about "the 2019 trust distributions" can surface them. Microsoft's security page puts it this way: "Overshared or poorly governed content can affect Copilot results and increase risk."

## Who sets it up: Microsoft's own deployment blueprint

Microsoft publishes a three-part blueprint for a secure Copilot rollout. Each step needs an admin with the right role, and in a family office that may be your outsourced IT provider or a single in-house IT lead.

| Step | What Microsoft recommends |
| --- | --- |
| 1. Remediate oversharing | Find overshared, ownerless or inactive sites with Purview Data Security Posture Management and the SharePoint Advanced Management (SAM) Content Management Assessment. Use Restricted Content Discovery to keep sensitive sites out of Copilot while you fix them. Run site access reviews, remove company-wide sharing groups such as "Everyone except external users," and correct broken permission inheritance |
| 2. Set up guardrails | Apply Restricted Access Control to business-critical sites, restrict Anyone links and company-wide sharing at tenant level, require sensitivity labels, and set Purview DLP policies so labeled files or sensitive prompts are excluded from Copilot |
| 3. Meet regulations | Decide how long to keep audit logs and Copilot interactions, and use Purview eDiscovery to search and preserve Copilot content for audits or legal requests |

Microsoft says SharePoint Advanced Management is included with Copilot licenses, and that the blueprint needs at least the foundational Purview features in Microsoft 365 E3, with some optimized features in E5 or E7. To view the Copilot security dashboard in the admin center you need the Global Reader role, and to make changes, the AI Administrator role.

## What Copilot keeps, and where it runs

Microsoft stores each user's prompt and Copilot's response, with citations, as Copilot activity history. Admins can search it with Content search or Purview and set retention policies, and users can delete their own history from the My Account portal. For a family office, that history is a record like any email: it can be preserved and produced in discovery.

On location, Microsoft says Copilot routes calls to the closest data centers in the region but can call other regions during high utilization. EU traffic stays within the EU Data Boundary, while customers outside the EU may have queries processed in the US, the EU or other regions. Microsoft also offers Anthropic and OpenAI models inside Copilot; admins decide whether to use them, and Microsoft notes that Anthropic models are currently excluded from the EU Data Boundary.

## Where Copilot's scope ends for a family office

Copilot works on what lives in, or connects to, your Microsoft 365 tenant. The principal's personal email, custodian portals and the household's own accounts reach it only through connectors or agents your admin approves, each under its own terms. Microsoft advises checking the privacy statement and terms of use of every agent you enable. Our guide on [whether Claude, Copilot and Gemini are safe for confidential information](/blog/is-claude-copilot-gemini-safe-for-confidential-information/) compares the providers side by side.

## Private SuperIntelligence

Copilot is strong inside a well-governed tenant, and your office does the governing. Private SuperIntelligence from Mitosis Labs is the most capable AI, trusted with everything: an AI concierge built for one family, working across the family's own email, documents and data, answering with citations, and acting within permissions the family sets. Delivery takes weeks, and the provider keeps no copy of the work. Compare it with the other [best AI tools for family offices](/blog/best-ai-for-family-offices/) or read about [AI for family offices](/family-offices/).

## Frequently asked questions

### Does Microsoft Copilot train on our family office's data?

No. Microsoft states that prompts, responses and data accessed through Microsoft Graph are not used to train foundation models, including those Copilot uses.

### Can Copilot show one employee another person's files?

Copilot shows only what the asking user already has at least view permission for. If a file was shared with the whole company or through a broad link, Copilot can surface it to anyone covered by that sharing.

### How do we stop Copilot from surfacing a sensitive SharePoint site?

Microsoft recommends Restricted Content Discovery to keep sensitive sites out of Copilot while you fix permissions, and Purview DLP policies to exclude labeled files from Copilot's answers.

### Does Copilot keep our prompts?

Yes. Microsoft stores prompts and responses as Copilot activity history, which admins can search, retain or delete under Purview policies and which users can delete from the My Account portal.

### Is Microsoft Copilot the same as Microsoft 365 Copilot?

Yes. Microsoft renamed Microsoft 365 Copilot to Microsoft Copilot and says the change does not affect security, compliance or privacy for organizations.


## Related reading

- [Private AI for family offices](/blog/private-ai-for-family-offices/)
- [Consolidated reporting across custodians, without the Excel export](/blog/family-office-consolidated-reporting/)
- [Tracking K-1s across 30 entities](/blog/k-1-tracking-across-entities/)
- [Capital call notices: catching every one, across every trust and LLC](/blog/capital-call-tracking/)
- [The family office technology stack](/blog/family-office-technology-stack/)
- [Family office operations, and where AI changes the staff math](/blog/family-office-operations-and-ai/)
- [What is private superintelligence?](/blog/what-is-private-superintelligence/)

## Sources

- [Data, Privacy, and Security for Microsoft Copilot (Microsoft Learn, accessed 2026-10-15)](https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-privacy)
- [Security for Microsoft Copilot (Microsoft Learn, 2026-10-13, accessed 2026-10-15)](https://learn.microsoft.com/en-us/microsoft-365/copilot/security-microsoft-365-copilot)
- [Secure and governed data foundation for Microsoft Copilot, deployment blueprint (Microsoft Learn, accessed 2026-10-15)](https://learn.microsoft.com/en-us/microsoft-365/copilot/secure-govern-copilot-foundational-deployment-guidance)
- [Configure a secure and governed foundation for Microsoft Copilot (Microsoft Learn, 2026-10-06, accessed 2026-10-15)](https://learn.microsoft.com/en-us/microsoft-365/copilot/configure-secure-governed-data-foundation-microsoft-365-copilot)