Is Microsoft Copilot Chat (work/school account) safe for UK schools?

AI Prefect rates Microsoft Copilot Chat (work/school account) Green for staff use (Processor, no training on inputs, UK/EU storage or stated transfer safeguards, school DPA available) and Amber for pupil use (Minimum age not stated). This is based on the supplier's published documents, last checked 2026-10-23. It is not legal advice; complete your own DPIA.

Does Microsoft Copilot Chat (work/school account) train on our data?

According to the supplier's published documents: no - prompts/responses not used to train foundation models.

Where is Microsoft Copilot Chat (work/school account) data stored?

stored at rest in the tenant's geography (UK for UK tenants) under Microsoft 365 data residency commitments, with no Copilot-specific exceptions listed; transfers under the Products and Services DPA (SCCs).

What age is Microsoft Copilot Chat (work/school account) for?

Not stated. The supplier does not publish a minimum age we could find.

Is there a safer alternative to Microsoft Copilot Chat (work/school account)?

We have not yet found a better-rated tool with the same main use. Our tool page lists what to look for instead.

Microsoft Copilot Chat (work/school account)

Microsoft · general chatbot · Last checked 2026-10-23

One-page summary (print or PDF)DPIA starter Compare with other tools Add to our tools list Get rating-change alerts

Rating: a rules-based summary of the supplier’s published terms. Not legal advice and not a substitute for a DPIA. How it’s worked out

Staff: GREEN Lower risk: fine to use with normal checks

Why green:

Processor, no training on inputs, UK/EU storage or stated transfer safeguards, school DPA available

Pupils: AMBER Use with caution

Why amber:

Minimum age not stated

How is this rated?

Key facts

Trains on what you type: No
Where data is stored: UK / EU
Minimum age: Not stated
Use case: General AI assistant / chatbot
Sector: Schools, Further education (FE), Higher education (HE)
Research status: Sourced

Safer alternatives

Same main use (General AI assistant / chatbot) and sector, rated better for the same audience. Alternatives are suggested from our published ratings; check they meet your needs. How alternatives are chosen

For pupil use

No better-rated alternative found yet: here’s what to look for.

It acts as a processor for your school (not a controller)
It doesn’t train its AI on what you type
Data stays in the UK/EU, or transfer safeguards (standard contractual clauses, the UK IDTA or adequacy) are stated
There is a data processing agreement (DPA) for schools
The minimum age fits your pupils, or pupils use it through a school account

We’ve logged this gap and will research tools for it in our weekly update.

New here? Each field has a short explanation underneath. Our getting started guide explains what to look for and what to do next.

About the tool

SupplierThe company that makes and runs the tool.: Microsoft
WebsiteWhere we found the main information about the tool.: https://learn.microsoft.com/en-us/microsoft-365/copilot/enterprise-data-protection
CategoryWhat sort of tool it is, for example a chatbot or a lesson-planning helper.: general chatbot
Pupil-facingWhether pupils use it directly, or only staff. Pupil use needs extra care.: not stated

Your data

Processor or controllerA processor only uses data on your school’s instructions. A controller makes its own decisions about the data, which means your school has less say.: processor (Bing web queries: Microsoft is independent controller)
Where data is storedWhich country the data is stored in. UK or EU storage is usually simpler for schools.: stored at rest in the tenant's geography (UK for UK tenants) under Microsoft 365 data residency commitments, with no Copilot-specific exceptions listed; transfers under the Products and Services DPA (SCCs)
Trains AI models on inputsWhether what you type (or upload) may be used to improve the supplier’s AI. “No” is what you want for anything about pupils or staff.: no - prompts/responses not used to train foundation models
How long inputs are keptHow long the supplier keeps what you type before deleting it.: not stated

Agreements and contacts

Privacy noticeThe supplier’s privacy notice: their own explanation of what they do with personal data.: https://support.microsoft.com/en-us/privacy/data-protection-when-using-microsoft-365-copilot-chat-for-work-or-school
Data processing agreement (DPA)The data processing agreement: the contract that sets out how the supplier must look after your school’s data.: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA
Signs individual DPAs with schoolsWhether the supplier will sign a data agreement with your school specifically, rather than just standard online terms.: yes - Microsoft Products and Services DPA applies to all customers
UK GDPR representative / DPOWhether the supplier names a data protection officer or UK representative you can contact about data questions.: not stated

Age and safety

Minimum ageThe youngest age the supplier allows to use the tool. Check this before any pupil uses it.: not stated
Key safety noteAnything else worth knowing, such as admin controls or content filtering.: prompts and responses logged; IT admin can audit
Research statusHow complete our research on this tool is.: sourced

Sources

learn.microsoft.comhttps://learn.microsoft.com/en-us/microsoft-365/copilot/enterprise-data-protection
support.microsoft.comhttps://support.microsoft.com/en-us/privacy/data-protection-when-using-microsoft-365-copilot-chat-for-work-or-school
microsoft.comhttps://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA
learn.microsoft.comhttps://learn.microsoft.com/en-us/microsoft-365/enterprise/m365-dr-workload-copilot

Change history

No changes recorded since this entry was first published.

See all recent changes

Quick answers

Is Microsoft Copilot Chat (work/school account) safe for UK schools?: AI Prefect rates Microsoft Copilot Chat (work/school account) Green for staff use (Processor, no training on inputs, UK/EU storage or stated transfer safeguards, school DPA available) and Amber for pupil use (Minimum age not stated). This is based on the supplier's published documents, last checked 2026-10-23. It is not legal advice; complete your own DPIA.
Does Microsoft Copilot Chat (work/school account) train on our data?: According to the supplier's published documents: no - prompts/responses not used to train foundation models.
Where is Microsoft Copilot Chat (work/school account) data stored?: stored at rest in the tenant's geography (UK for UK tenants) under Microsoft 365 data residency commitments, with no Copilot-specific exceptions listed; transfers under the Products and Services DPA (SCCs).
What age is Microsoft Copilot Chat (work/school account) for?: Not stated. The supplier does not publish a minimum age we could find.
Is there a safer alternative to Microsoft Copilot Chat (work/school account)?: We have not yet found a better-rated tool with the same main use. Our tool page lists what to look for instead.

Generated only from the facts above. “Not stated” means the supplier doesn’t publish it.

Tell me if this rating changes

Suppliers change their terms. Leave your email and we’ll let you know if the rating for Microsoft Copilot Chat (work/school account) changes. Nothing else.

Spotted something out of date? Suppliers change their terms. Tell us and we will re-check it. This page is not legal advice; complete your own DPIA.