As Copilot becomes a daily workflow for more teams, IT and security leaders need clear, practical controls to deploy and manage confidently—without slowing down adoption or compromising governance.
Let's take a closer look at the new enhancements providing built-in security, management, and governance controls to help give you greater visibility and control over your Copilot deployment.
Secure and Govern Microsoft 365 Copilot – a Foundational Deployment Guide
We are excited to share that we have updated and expanded the deployment blueprint to address Oversharing into the Secure and Govern Microsoft 365 Copilot foundational deployment guidance! This guide provides these three essential steps for establishing a secure and governed foundation for Copilot:
- Remediate oversharing
- Implement reliable guardrails
- Meet AI-related regulatory obligations
Delivering a foundational path to help every organization get started with Copilot with confidence. Read more and download the blueprint at aka.ms/Copilot/SecureGovern!
As part of this deployment guidance, here are the features from Microsoft Purview to help you secure and govern Microsoft 365 Copilot.
Microsoft Purview Data Loss Prevention to safeguard Copilot prompts
Microsoft Purview Data Loss Prevention (DLP) for Microsoft 365 Copilot to safeguard prompts helps organizations prevent sensitive information from being used in Copilot prompts. Admins can define policies that detect and restrict prompts containing sensitive information types (SITs), ensuring that Copilot does not respond to such inputs or use them in any web grounding. Generally available.
Microsoft Purview Data Loss Prevention for web queries to safeguard sensitive web search
We are also expanding Microsoft Purview DLP for Microsoft 365 Copilot and Copilot Chat to safeguard web searches containing sensitive data. Admins now have the option to define policies that detect and restrict prompts containing sensitive information types (SITs) from being used for web search, while allowing the response to be grounded in Work IQ. This capability currently extends to Microsoft 365 Copilot and agents built in Copilot Studio that are published to Microsoft 365 Copilot. Now available in Public preview.
Microsoft Purview: Data Security Posture Management: Remediate overshared files
Now, in addition to identifying sharing links across SharePoint sites, this enhanced capability enables bulk remediation by allowing admins to remediate or disable overshared links at scale. This helps organizations proactively reduce data exposure, strengthen compliance posture, and ensure sensitive files are only accessible to the right people. Generally available.
Purview in Microsoft 365 Admin Center
Finally, AI and IT admins in Microsoft 365 Admin Center can gain visibility around oversharing risks and drive remediations, understand how many sensitive copilot interactions are protected, and turn on Microsoft Purview DLP for Copilot right there. This enables secure adoption of Copilot and collaboration with the Security team. Generally available.
Organizational messages enhancements
Organizational Messages now includes email as a delivery channel, expanding beyond existing surfaces such as the Windows Taskbar, Windows Notifications, Windows Spotlight, and Teams Popovers. Email enables high‑confidence reach by delivering critical messages directly to users’ inbox. It also supports targeted, timely communication for important updates such as adoption nudges while providing a familiar, auditable channel IT can trust. Rolling out to general availability this month.
Usage‑based targeting enables IT admins to drive Copilot adoption by delivering Organizational Messages to users based on real usage behavior, not static group membership. By leveraging dynamic, pre‑defined usage segments, admins can reach the right users with timely, relevant guidance that accelerates awareness, engagement, and value from Copilot investments. Rolling out to general availability this month.
Copilot Dashboard: Expanded access and deeper insights
The Copilot Dashboard is now available to customers with at least 1 Microsoft 365 Copilot license, and includes new capabilities that help you understand how Copilot is being used, how it is changing work patterns, and where it’s delivering value. Analyze how your organization uses both Microsoft 365 Copilot and Copilot Chat so you can make informed decisions about rollout and enablement. Metrics include total users, usage trends, adoption by group, intensity, retention, and app-level breakdowns. Generally available.
User satisfaction tracking at scale
Understand how users perceive the value of Microsoft 365 Copilot by analyzing real‑time feedback captured in their natural workflow. This feature aggregates thumbs‑up and thumbs‑down reactions to Copilot responses across Microsoft 365 apps, helping you track satisfaction trends over time and compare satisfaction across groups. These insights help you identify where Copilot is resonating—and where additional guidance or enablement may be needed. Generally available.
New Intent Patterns Across Microsoft 365 Apps
Get a deeper understanding of how employees use Copilot to get work done. New intent‑based metrics categorize individual user prompts into common intent categories to better understand Copilot usage. Analyze common Copilot tasks and usage patterns, including activity in the Microsoft 365 Copilot app, Edge, and OneNote, as well as key scenarios in Outlook, Word, Excel, and PowerPoint such as suggested reply, translate, coach, and clean data. These metrics are available in the Copilot Dashboard and advanced reporting in Viva Insights to support deeper behavioral analysis. Rolling out to public preview this month.
Export Copilot Dashboard Data
Extend your analysis beyond the dashboard by exporting Copilot metrics for custom reporting in your own reporting tools. You can download de‑identified Copilot Dashboard data as a CSV file, including weekly metrics covering the past six months, to support offline analysis or integration with other analytics tools. This makes it easier to tailor insights to your organization’s specific reporting needs. Rolling out to general availability this month.
Conclusion & next steps
These latest updates are designed to help IT administrators and security professionals address practical needs when deploying Microsoft 365 Copilot: establish a secure and governed foundation, drive adoption, and understand where it’s delivering value. Learn more in the Get started deploying Copilot and agents playbook and at aka.ms/Copilot/SecureGovern.
Microsoft