Forum Discussion
How does Bing handle organization data when web content is enabled in Copilot for M365?
Does commercial data protection apply to prompts and responses within Copilot for Microsoft 365 when web content is enabled? Does it get the same protections as Microsoft Copilot, formerly known as Bing Chat for Enterprise? How is company data handled in this scenario?
I've tried to follow the trail of privacy, terms of use, etc for Bing Search services, but have come up empty with how the data is handled from the company's perspective. All I see is in association to end user privacy. This is a gap in documentation either from an omission standpoint or simplicity and explicit standpoint. It is certainly unclear to me.
Full transparency: I posted this in the M365 hub as well. I figure this is technically more appropriate here.
- JaredAndersen
Microsoft
Hi Stephen_N665!
This is a great question. There are a few important differences, but the level of protection when using web grounding in Copilot (formerly BCE) or in Copilot for Microsoft 365 is essentially identical. In both products, a portion of the user prompt is converted into a synthetic search query, which is then sent to the Bing Search API to provide additional information for the LLM to process a response.
Commercial data protection in Copilot (formerly BCE) applies to prompts and responses: Microsoft doesn't save them, have eyes on them, or use them to train the underlying LLM. In Copilot for Microsoft 365, prompts and responses are saved within the service boundary and are also not used to train the LLM.
The generated queries are different from prompts and responses. This article (https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy#how-the-web-content-plugin-works) has a pretty good explanation of how the generated query is created and is different from the user prompt.
Search queries that go to the Bing Search API are covered by the following agreements:
- The Microsoft Services Agreement: https://www.microsoft.com/en-us/servicesagreement
- The Microsoft Privacy Statement: https://privacy.microsoft.com/en-US/privacystatement
I hope this is helpful,
Jared
