Yes. Microsoft Copilot is designed with enterprise security, privacy, and compliance protections to help safeguard institutional data. When signed in with your USD account and using approved Microsoft Copilot services, your prompts and responses are protected under Microsoft's commercial data protection commitments.
Does Microsoft use my prompts to train AI models?
No.
According to Microsoft's enterprise commitments, prompts and responses submitted through Microsoft Copilot are not used to train public large language models (LLMs). Information entered into Copilot remains within Microsoft's enterprise security and privacy framework.
Is my data encrypted?
Yes.
Microsoft states that Copilot data is encrypted both:
- During transmission
- While stored within Microsoft services
These protections help secure information from unauthorized access.
Can other users see my prompts or conversations?
Copilot does not automatically share your prompts or responses with other users.
Access to information remains subject to the permissions and security settings already established within Microsoft 365. Users can only access data they are authorized to view.
Can Microsoft 365 Copilot access all university data?
No.
Microsoft 365 Copilot respects existing permissions and security boundaries. It can only access files, emails, meetings, chats, and other information that you already have permission to access through Microsoft 365.
Copilot does not grant additional access to university data.
Can I use restricted or sensitive university data in Copilot?
In many cases, yes, but only when using approved Microsoft Copilot services and following USD data governance requirements.
USD's AI guidance identifies both Microsoft Copilot Chat and Microsoft 365 Copilot as approved AI platforms. However, users remain responsible for following:
- Data classification requirements
- FERPA requirements
- HIPAA requirements (where applicable)
- Data Steward approvals
- Other university policies governing sensitive information
Is Microsoft Copilot safer than public AI tools?
Microsoft Copilot is USD's preferred AI platform for work-related activities because it includes enterprise protections and is approved for institutional use.
Public AI platforms may have different privacy, security, and data handling practices. Users should follow USD's AI guidelines before entering university information into any non-approved AI service.
What are my responsibilities when using Copilot?
While Microsoft provides security protections, users remain responsible for:
- Following USD policies and procedures
- Protecting confidential information
- Verifying the accuracy of AI-generated content
- Using appropriate judgment when sharing institutional data
- Ensuring compliance with applicable laws, regulations, and university requirements
AI-generated content should always be reviewed before being used for decision-making, communications, research, or official university business.
Key Takeaways
✅ Prompts and responses are not used to train public AI models.
✅ Data is encrypted in transit and at rest.
✅ Microsoft 365 Copilot respects existing file and data permissions.
✅ Copilot is an approved AI platform at USD.
✅ Users must still follow university data governance and security requirements.
✅ AI-generated content should always be reviewed and verified before use.