Microsoft Copilot: Can your employer see your prompts?
With a work or school account, Copilot prompts may be logged and accessible to authorized compliance staff.
Key insights
- Prompts, responses and some Bing searches may be logged when you use Copilot with a work or school account.
- Access depends on your organization's roles, permissions, retention rules and compliance processes.
- Not using prompts to train foundation models does not mean prompts cannot be retained for compliance.
- The Work IQ switch affects what work data Copilot can use as context; it does not guarantee that prompts are not logged.
- The research notes say personal Microsoft accounts are outside an employer's Microsoft 365 tenant, but other workplace monitoring may apply.
Microsoft Copilot prompts entered with a work or school account may be logged, along with responses and some searches generated from prompts. This matters to employees using Copilot Chat or Microsoft 365 Copilot through their organization. Daniel Rohregger (365 Checkpoint) is the named source for the demonstration, although no transcript or demonstration details were provided.
What's new
The key distinction is between model training and organizational recordkeeping. The research notes say prompts and responses from Copilot Chat with enterprise data protection are not used to train foundation models, but may still be retained for audit, security or compliance purposes. Those are separate uses of the information.
That does not mean every manager or IT employee can routinely read every conversation. Access may depend on assigned roles, audit permissions, eDiscovery processes, retention settings and organizational policy. The notes also say Microsoft 365 Copilot respects the user's existing access to work data rather than granting new access to files or messages.
Who it is for and what you need
This applies to people using Copilot with a work or school account, including Microsoft 365 Copilot users. The research notes do not specify particular license requirements, tenant settings, or a rollout stage for the capabilities discussed.
They distinguish work accounts from personal Microsoft accounts: activity on a personal account is not visible through the employer's Microsoft 365 tenant. However, using a personal account on a company device or network does not guarantee privacy from other workplace monitoring.
How it works
The notes describe possible records of prompts, Copilot responses, Bing searches triggered by prompts, and related audit or compliance metadata. Depending on the situation, some work information used to produce an answer may also be involved. The exact records and who can retrieve them depend on the organization's setup.
- Check whether you are signed in with a work or school account or a personal Microsoft account.
- For a work account, consult your organization's AI, privacy and acceptable-use policies to understand retention and access.
- If your Copilot Chat experience includes a Work IQ switch, understand that it controls whether work data can be used as context; it is not a promise that chats will not be logged.
- Ask your IT or privacy team about handling sensitive information. The notes describe Purview policies that can restrict web search for prompts containing sensitive information, but do not establish what policies your organization has enabled.
Limitations and open questions
The supplied material does not include an official Microsoft source URL, and the Short has no transcript. As a result, the specific logging, retention and access details cannot be independently checked here against Microsoft documentation. No tenant-specific setting or universal retention period is provided.
Do not treat the Work IQ switch or the absence of model training as a way to make a work-account conversation invisible to authorized compliance processes. For practical decisions, follow your organization's policy and ask its administrators what is retained and which roles can access it.
Sources
Frequently asked questions
Can my employer read my Microsoft Copilot prompts?
Prompts and responses from work or school accounts may be logged and accessible through authorized audit or compliance processes. Whether a particular person can access them depends on the organization's permissions and policies.
Are work Copilot prompts used to train AI models?
The research notes say prompts and responses from Copilot Chat with enterprise data protection are not used to train foundation models. They may still be retained for audit, security or compliance.
Does turning off Work IQ stop Copilot from logging prompts?
No such guarantee is stated. The notes describe Work IQ as controlling whether Copilot can use work data as context, not whether prompts are logged.
Can my employer see Copilot activity on a personal account?
The notes say personal-account activity is not visible through the employer's Microsoft 365 tenant. Other monitoring on a company device or network may still apply.