Forum Discussion
StephanGee
Nov 27, 2025Steel Contributor
Sensitivity Labels and CoPilot - "No AI"
As a Purview Administrator, I recently received a request that might resonate with many of you: add a “No AI” designation to every sublabel we have. Why? Because our contracts and EULAs explicitly st...
Nadia-Fortini
Microsoft
Apr 20, 2026HI StephanGee There are a few ways to handle this scenario:
- Grounding DLP based on labels: You can publish a policy that will exclude all knowledge sources (documents and emails) that are labeled with a specific label e.g. highly confidential. In this case Copilot processing will exclude these documents if the label matches the policy.
- Use SharePoint SAM capabilities:
- RDC - Restricted Content discovery to hide SPO sites from Copilot grounding
- RAC: Restrict access control to only allow users in approved security groups to access the site so only the owners/members will ever have access. Since Copilot only ground the data based on the user's permissions, it's a way to automatically protect sensitive info.
Thank you,
Nadia