← Back to Microsoft Copilot (consumer, personal account)

Fits on one A4 page. Choose “Save as PDF” in the print window to attach it to an email or a governors’ paper.

Microsoft Copilot (consumer, personal account)

AI tool summary for DPOs and governors. Microsoft · Facts last checked 2026-10-23 · Printed 24 October 2026

AI Prefect

Staff: Red · Not recommended for school data
  • Trains on what you type by default, with no school-level opt-out stated
  • Supplier acts as a data controller, not a processor for the school
Pupils: Red · Not recommended for school data
  • Trains on what you type by default, with no school-level opt-out stated
  • Supplier acts as a data controller, not a processor for the school
SupplierMicrosoft
Categorygeneral chatbot
Pupil-facingnot stated
Processor or controllercontroller (consumer service)
Where data is storednot stated
Trains AI models on inputsYES for adults unless opted out in Privacy settings; signed-in under-18s not used for training
How long inputs are keptnot stated
Data processing agreement (DPA)not stated
Signs individual DPAs with schoolsnot stated
UK GDPR representative / DPOnot stated
Minimum age13+ in the UK
Key safety notedifferent from Copilot Chat signed in with a school account - check which one staff use
Main useGeneral AI assistant / chatbot

Better-rated alternatives for the same use: ChatGPT Edu (Green), Gemini app (Workspace for Education) (Green), Microsoft 365 Copilot (Green)

Before using it: check the minimum age fits your pupils, confirm a data processing agreement is in place, switch off AI training where possible, and record the decision in your DPIA.

Sources: https://www.microsoft.com/en-gb/microsoft-copilot/for-individuals/termsofuse · https://support.microsoft.com/en-gb/privacy/microsoft-copilot/young-people · https://support.microsoft.com/en-gb/microsoft-copilot/microsoft-copilot-privacy-controls
Full entry: aiprefect.co.uk/tools/microsoft-copilot. Rating is a rules-based summary of the supplier’s published terms. “Not stated” means we could not find it in their documents. This is not legal advice and does not replace your DPIA.