Copilot can leverage all the data that the employee has access to; from widely published research reports, it is clear that most employees’ permissions to sensitive data are far greater than what they should be entitled to in many cases. Is the co-pilot environment only as good as original compliance? and before setting out on a Copilot journey shouldn't the educated process of locking down data better be front and center by Microsoft?