What Copilot can see
Microsoft 365 Copilot can see what the person typing the prompt can already open. Microsoft describes Copilot as an orchestration engine that combines large language models with content in Microsoft Graph, meaning the emails, chats, documents, calendar items and meetings a user has permission to access, and the Microsoft 365 apps that user works in (Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot, accessed 2026-10-20). Microsoft has renamed the product Microsoft Copilot and states that nothing about security, compliance or privacy changed with the name (same source). EPC Group, a Houston-based Microsoft consulting firm, prepares tenants for Copilot by treating that one sentence as the whole security model: if a user holds view permission on a file, Copilot can read it into an answer, and if the user does not, Copilot cannot.
Two facts follow. First, Copilot does not learn from the tenant. Microsoft states that prompts, responses and data accessed through Microsoft Graph are not used to train foundation models, and that the stored record of each interaction is encrypted and governed by the same contractual commitments as other Microsoft 365 content, with Purview retention and Content search available to administrators (same source). Second, Copilot does not grant access. Every exposure a Copilot pilot uncovers already existed; the pilot simply made it searchable in plain language.
Why inherited permissions are the risk
The answer to whether Copilot respects permissions is yes, and that is precisely the problem. Microsoft tells customers it is important to use the permission models available in services such as SharePoint so that the right users and groups have access to the right content, including access granted to people outside the organization through shared channels (Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot, accessed 2026-10-20). In most tenants that model has drifted for years. Microsoft notes that SharePoint sets sharing to the most permissive option by default, and its own readiness guidance lists the risk signals: broad sharing through Anyone, Everyone and organization-wide links, large audiences with excessive permissions, broken permission inheritance, sensitive content with weak protection, unlabeled sites, and governance gaps such as ownerless, inactive or unreviewed sites (Microsoft Learn, Get ready for Microsoft Copilot and agents with SharePoint Advanced Management, accessed 2026-10-20). A finance analyst who was added to an organization-wide group in 2021 technically has view rights on a leadership site they have never visited; before Copilot, nobody noticed, because nobody browsed there.
Where the exposure usually is
EPC Group's oversharing work starts from Microsoft's two report sets rather than from interviews. SharePoint Advanced Management (SAM) provides data access governance reports, beginning with the site permissions baseline report that snapshots the current permission structure across SharePoint and OneDrive, plus sharing link activity reports and Everyone except external users insights (Microsoft Learn, Get ready for Microsoft Copilot and agents with SharePoint Advanced Management, accessed 2026-10-20). Microsoft Purview Data Security Posture Management adds data risk assessments that identify overshared sites holding sensitive data, risky sharing links and frequently accessed content, and the SAM Content Management Assessment flags oversized audiences, Everyone except external users usage, broken inheritance and ownerless or inactive sites (Microsoft Learn, Configure a secure and governed foundation for Microsoft Copilot, accessed 2026-10-20). Sites where several signals overlap, for example sensitive data plus Anyone links, or a public site with no owner, are the ones that produce the first embarrassing Copilot answer.
The sequence of controls that closes it
The order matters because some controls are fast but temporary and others are durable but slow. EPC Group runs them in this sequence, which follows Microsoft's own remediation guidance (Microsoft Learn, Configure a secure and governed foundation for Microsoft Copilot, accessed 2026-10-20):
- Interim protection for high-risk sites. Turn on Restricted Content Discovery for the sites identified above so they stop appearing in Copilot and organization-wide search while permissions are left unchanged, and configure a Purview DLP policy for Copilot so labeled sensitive content is excluded from grounding. Validate with Purview audit that Copilot no longer returns the restricted content.
- Fix the permissions. Remove excessive access, correct broken inheritance, assign an accountable owner to every flagged site, and apply site sensitivity labels. Where a site must be locked to a defined population, Restricted Access Control limits it to a Microsoft Entra security group or Microsoft 365 group, and users outside that group lose access even if they held it before (Microsoft Learn, Get ready for Microsoft Copilot and agents with SharePoint Advanced Management, accessed 2026-10-20).
- Reset tenant sharing defaults. Adjust the SharePoint and OneDrive sharing settings, link defaults and expiration so the drift does not recur (same source).
- Labels and DLP as the durable layer. Extend sensitivity labels and the Copilot DLP location from the pilot sites to the tenant, covered in the next section.
- Lifecycle. Archive inactive sites and resolve ownerless ones through SAM site lifecycle policies so the content estate stops growing faster than its governance.
One control deliberately missing from that list is Restricted SharePoint Search. Microsoft describes it as a short-term allow list that is not a security boundary, warns that recently accessed or shared sites still appear in Copilot results regardless of the list, and is retiring it: starting July 31, 2026, new enablement is blocked, and customers are directed to Restricted Content Discovery, SAM and Purview instead (Microsoft Learn, Restricted SharePoint Search, accessed 2026-10-20). EPC Group's SharePoint consulting practice runs steps one through three; the Copilot consulting practice owns the pilot gate that follows.
How sensitivity labels and DLP limit what Copilot returns
Purview Data Loss Prevention has a dedicated policy location named Microsoft 365 Copilot and Copilot Chat. A rule with the condition Content contains Sensitivity labels and the action Prevent Copilot from processing content means Copilot does not read or summarize a labeled file or email, although the item can still appear as a citation the user may open directly. Separate rules can refuse to answer a prompt that contains chosen sensitive information types such as account or passport numbers, block external web search for such a prompt, and, in preview, exclude email from external senders from grounding (Microsoft Learn, Learn about using Microsoft Purview Data Loss Prevention to protect interactions with Microsoft 365 Copilot, Copilot Chat, and Cowork, accessed 2026-10-20). Licensing differs by rule: restricting labeled files and emails requires Microsoft 365 E5, A5 or equivalent Purview suites, while prompt protection is available to all Copilot and Copilot Chat users (Microsoft Learn, Microsoft Purview service description, accessed 2026-10-20). Encryption adds a further gate: when a label grants a user VIEW rights without EXTRACT, Copilot will not summarize the content and can only reference it with a link (Microsoft Learn, Considerations to manage Microsoft 365 Copilot and Channel Agent in Teams for security and compliance, accessed 2026-10-20).
Documented work
ANON-CASES: EPC Group engagement data in financial services covers mid-size and large institutions that completed an oversharing assessment and remediation before Copilot enablement, delivered by the firm's SharePoint consulting and Copilot practices. Client names are not published here. Engagements are described by industry and organization size only, and no outcome figures are quoted that cannot be traced to a signed deliverable. EPC Group is a Microsoft Solutions Partner with all six Solutions Partner Designations as of October 2026.
Primary sources
- SharePoint Advanced Management features in Microsoft Copilot licenses — Microsoft Learn, accessed 2026-10-20
- Restricted SharePoint Search — Microsoft Learn, accessed 2026-10-20
- Microsoft Purview service description — Microsoft Learn, accessed 2026-10-20
- Configure a secure and governed foundation for Microsoft Copilot — Microsoft Learn, accessed 2026-10-20
- Get ready for Microsoft Copilot and agents with SharePoint Advanced Management — Microsoft Learn, accessed 2026-10-20
Frequently Asked Questions
Does Copilot use my data to train models?
No. Microsoft states that prompts, responses and data accessed through Microsoft Graph are not used to train foundation large language models, including those used by Copilot. Each interaction is stored as the user’s Copilot activity history, encrypted and governed by the same contractual commitments as other Microsoft 365 content; administrators can search it and apply Purview retention, and users can delete their own history (Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot, accessed 2026-10-20).
How does Copilot respect existing permissions, and why is that the risk?
Copilot surfaces only organizational data to which the user has at least view permission, and Microsoft tells customers to rely on the permission models in SharePoint and other Microsoft 365 services (Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot, accessed 2026-10-20). The risk is that most tenants grant far more view access than anyone uses: organization-wide links, Everyone except external users, and sites with broken inheritance. Copilot does not add access; it makes existing access easy to exercise with one question.
What is SharePoint Advanced Management and restricted search?
SharePoint Advanced Management (SAM) is the admin feature set for finding and fixing oversharing: data access governance reports, sharing link and Everyone except external users insights, Restricted Access Control, Restricted Content Discovery and site lifecycle policies, several of which are included with Copilot licenses (Microsoft Learn, SharePoint Advanced Management features in Microsoft Copilot licenses, accessed 2026-10-20). Restricted SharePoint Search is a temporary allow list for search and Copilot, not a security boundary, and new enablement is blocked starting July 31, 2026 (Microsoft Learn, Restricted SharePoint Search, accessed 2026-10-20).
How do sensitivity labels and DLP limit what Copilot returns?
A Purview DLP policy scoped to the Copilot location can stop Copilot from processing files and emails with chosen sensitivity labels; the item may appear as a citation, but its content is not used. Other rules block prompts containing sensitive information types and block web search for them (Microsoft Learn, Learn about using Microsoft Purview Data Loss Prevention to protect interactions with Microsoft 365 Copilot, Copilot Chat, and Cowork, accessed 2026-10-20). The file restriction needs Microsoft 365 E5 or equivalent Purview licensing (Microsoft Learn, Microsoft Purview service description, accessed 2026-10-20).
What should an oversharing assessment report before Copilot rollout?
It should list every site with organization-wide or Anyone links, every site where Everyone except external users holds access, sites with broken inheritance, ownerless and inactive sites, and the sensitive content on each, drawn from SAM data access governance reports and Purview data risk assessments (Microsoft Learn, Configure a secure and governed foundation for Microsoft Copilot, accessed 2026-10-20). For each site it names an owner, a remediation and an interim control, and it states whether the tenant is ready for a scoped pilot or tenant-wide enablement.
Talk to a senior architect
If your organization is holding Copilot licenses until the SharePoint estate is safe, a 30-minute discovery call with a senior EPC Group architect will cover the reports to pull first, the interim controls, and a remediation sequence for your tenant. See the Microsoft Copilot consulting service hub for engagement structures.
Email contact@epcgroup.net or call 888-381-9725.
a Microsoft Gold Partner (2000 until Microsoft retired the program in 2022) — today holding all six Microsoft Solutions Partner Designations.