Forum Discussion
How does Bing handle organization data when web content is enabled in Copilot for M365?
Does commercial data protection apply to prompts and responses within Copilot for Microsoft 365 when web content is enabled? Does it get the same protections as Microsoft Copilot, formerly known as B...
JaredAndersen
Microsoft
MicrosoftHi Stephen_N665!
This is a great question. There are a few important differences, but the level of protection when using web grounding in Copilot (formerly BCE) or in Copilot for Microsoft 365 is essentially identical. In both products, a portion of the user prompt is converted into a synthetic search query, which is then sent to the Bing Search API to provide additional information for the LLM to process a response.
Commercial data protection in Copilot (formerly BCE) applies to prompts and responses: Microsoft doesn't save them, have eyes on them, or use them to train the underlying LLM. In Copilot for Microsoft 365, prompts and responses are saved within the service boundary and are also not used to train the LLM.
The generated queries are different from prompts and responses. This article (https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy#how-the-web-content-plugin-works) has a pretty good explanation of how the generated query is created and is different from the user prompt.
Search queries that go to the Bing Search API are covered by the following agreements:
- The Microsoft Services Agreement: https://www.microsoft.com/en-us/servicesagreement
- The Microsoft Privacy Statement: https://privacy.microsoft.com/en-US/privacystatement
I hope this is helpful,
Jared
This is a great question. There are a few important differences, but the level of protection when using web grounding in Copilot (formerly BCE) or in Copilot for Microsoft 365 is essentially identical. In both products, a portion of the user prompt is converted into a synthetic search query, which is then sent to the Bing Search API to provide additional information for the LLM to process a response.
Commercial data protection in Copilot (formerly BCE) applies to prompts and responses: Microsoft doesn't save them, have eyes on them, or use them to train the underlying LLM. In Copilot for Microsoft 365, prompts and responses are saved within the service boundary and are also not used to train the LLM.
The generated queries are different from prompts and responses. This article (https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy#how-the-web-content-plugin-works) has a pretty good explanation of how the generated query is created and is different from the user prompt.
Search queries that go to the Bing Search API are covered by the following agreements:
- The Microsoft Services Agreement: https://www.microsoft.com/en-us/servicesagreement
- The Microsoft Privacy Statement: https://privacy.microsoft.com/en-US/privacystatement
I hope this is helpful,
Jared
Building on to the above query and your answer (very helpful, thanks) ...
Can you please explain in which geographies the search queries that go to Bing Search API are processed?
I have read the Services Agreement and Privacy Statement and haven't been able to work out the locations.
Thanks
