Microsoft 365 Copilot: what your employer can see

Checked November 2026. Part of the guide what your employer can see in your AI chats. Facts below link to Microsoft Learn pages, and the Sources list at the bottom quotes them.

The short answer

Microsoft says it stores the user’s prompt and Copilot’s response for Microsoft 365 Copilot interactions, and that admins can use Content search or Microsoft Purview to view and manage that stored data. It is searchable by compliance admins with the right roles, not by a manager through a normal account.

Question	What Microsoft’s pages say
Can admins see the text?	Yes, through Content search or Purview and eDiscovery.
Audit log	Records who, when and where, plus resources Copilot accessed. 180 days on Audit (Standard).
Retention	Whatever the company configures in a Purview retention policy.
Legal hold and export	eDiscovery search, holds, review sets and export.
Personal vs work	Sign in with a Microsoft Entra work account for work Copilot Chat.
Browser and network tools	Separate Purview features can warn or block pasting into third-party AI sites.

What admins can see: content versus metadata

Content. Microsoft describes the stored interaction data as the user’s prompt and Copilot’s response, including citations to any information used to ground the response, which it calls the “content of interactions”. Admins can use Content search or Microsoft Purview to view and manage it. For Teams chats with Copilot, admins can also use the Microsoft Teams Export APIs.

Where it lives. Microsoft says the prompts and responses are stored in a hidden folder in the mailbox of the user who runs the AI app. That folder is not designed to be reached directly by users or admins, but compliance admins can search it with eDiscovery tools.

Metadata and audit records. Microsoft says audit records contain details about which user interacted with Copilot, when the interaction took place, and where it occurred, plus references to the files, sites or other resources Copilot accessed. The documented properties include the app where it happened, the sensitivity label on accessed files and whether the public web was used. The Messages property lists message IDs and whether each is a prompt, not the text.

Where Microsoft’s pages word it differently. Microsoft’s Purview AI overview says prompts and responses are captured in the unified audit log and can be displayed in the activity explorer for people with a content viewer role, while the audit property table lists identifiers. We could not reconcile the two wordings from the docs alone. The eDiscovery path above is the clearly documented route to the text.

Other tools that read AI interactions. The same Purview page says Communication Compliance policies can cover user prompts and responses for AI apps, and Insider Risk Management has a risky AI usage template.

How long it is kept

• Audit records. In Audit (Standard), the system retains records for 180 days. Audit (Premium) supports longer, configurable retention.
• Prompts and responses. Companies can use retention policies to retain or delete prompts and responses. The pages we read describe how a configured policy works but do not state a default expiry date, so the period at your employer is a setting only they can tell you.
• Deleting does not guarantee removal. Microsoft says users can delete their Copilot activity history through the My Account portal, but that permanent deletion is suspended if the mailbox is under another retention policy, a Litigation Hold, a delay hold or an eDiscovery hold. It also warns that what you see in the app is not an accurate reflection of whether a message is retained for compliance.
• Deletion takes time. Even a policy set to delete after one day, Microsoft says, could take 16 days before the message stops appearing in eDiscovery searches.
• Memory. Microsoft says deleting a conversation or message from Purview or eDiscovery does not delete the associated Copilot memory.
• If you leave. Messages subject to retention move to an inactive mailbox when your account is deleted and remain available to an eDiscovery search.

Search, hold and export

An admin in the eDiscovery Manager role group can create a case and search for AI activity data. Microsoft says each interaction is an individual mailbox item, and exports (PST, individual messages or Microsoft Graph) show the user and the Copilot app as the two participants. After a search, results can be exported or added to a review set. Holds keep content in place; deletion needs a separate Search And Purge role and removal of holds first.

Personal account versus work account

• Work Copilot Chat. Microsoft tells admins to have users sign in with their Microsoft Entra account for Copilot Chat for work and education, and says the work experience shows a “Work” label and a data protection shield.
• Personal Microsoft account. The same page lists entry points available to users signed in with a personal account, such as the Copilot app and Copilot Chat in Edge, and says admins can manage whether people sign in to Microsoft 365 apps with a personal account through tenant restrictions V2.
• What the docs do not say. We did not find a Microsoft page that states whether an employer can read a personal-account Copilot chat through the Microsoft account itself. What Microsoft does document is that Purview can classify the consumer version of Microsoft Copilot as an “other AI app” detected through browser activity, which is the next section.

Browser and network monitoring

This is separate from the Copilot data above. Microsoft documents that:

• Windows devices onboarded to Purview can be configured for Endpoint DLP policies that warn or block users from sharing sensitive information with third-party generative AI sites in a browser, for example pasting credit card numbers into ChatGPT.
• For the sites it lists (ChatGPT, Google Gemini, the consumer version of Microsoft Copilot and DeepSeek), capturing prompts and responses for compliance needs a collection policy that captures content, plus the Purview browser extension and onboarded devices, or a network integration (Secure Access Service Edge or Security Service Edge). Support for some features is restricted to the Edge browser.
• Using this for third-party AI sites requires pay-as-you-go billing to be enabled.

Whether your employer has any of this turned on is not visible from the Copilot docs. Ask IT.

What to do

Short checklists, built only from the pages cited on this page. Where a step is plain advice rather than a vendor statement, it has no link.

Other tools

• ChatGPT Enterprise, Business and Edu
• Claude Team and Enterprise
• Gemini for Google Workspace
• All four compared
• Can my employer see my AI chats (short answer)
• Does your company need an AI policy?

Sources

All pages checked November 2026.

• Microsoft Learn, Data, Privacy, and Security for Microsoft Copilot: “The stored data includes the user’s prompt and Copilot’s response, including citations to any information used to ground Copilot’s response.” “To view and manage this stored data, admins can use Content search or Microsoft Purview.” “Your users can delete their Copilot activity history, which includes their prompts and the responses Copilot returns, by going to the My Account portal.”
• Microsoft Learn, Audit logs for Copilot and AI applications: “These audit records contain details about which user interacted with Copilot, when the interaction took place, and where it occurred.”
• Microsoft Learn, Learn about auditing solutions in Microsoft Purview: “In Audit (Standard), the system retains records for 180 days, which means you can search for activities that occurred within the past six months.”
• Microsoft Learn, Learn about retention for Copilot and AI apps: “Data from generative AI messages is stored in a hidden folder in the mailbox of the user who runs the AI app.” “Messages visible in your AI apps are not an accurate reflection of whether they are retained or permanently deleted for compliance requirements.”
• Microsoft Learn, Search for and delete AI application data in eDiscovery: “Deleting a conversation or message from Microsoft Purview or eDiscovery doesn’t delete the associated Copilot memory.”
• Microsoft Learn, Purview data security and compliance protections for Microsoft 365 Copilot and other generative AI apps: “Because user prompts and responses for AI apps are stored in a user’s mailbox, you can create a case and use search when a user’s mailbox is selected as the source for a search query.”
• Microsoft Learn, Use Microsoft Purview to manage data security & compliance for other AI apps: “Managing these AI interactions with Microsoft Purview requires you to enable pay-as-you-go billing in your organization.”
• Microsoft Learn, Frequently asked questions about Copilot Chat: “To ensure your users access Copilot Chat for work and education, instruct them to sign in with their Microsoft Entra account”.