| Category | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| manage-public-web-access | Manage Public Web Access | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/manage-public-web-access.md | Title: Data, privacy, and security for web queries in Microsoft 365 Copilot and Microsoft Copilot-- NOCSH--- Previously updated : 09/25/2024- +description: "Learn how to manage Microsoft 365 Copilot and Microsoft 365 access to web content for your organization." ++++ ms.localizationpriority: medium--- Tier2-- scotvorg-- M365-subscription-management -- Adm_O365-- Adm_TOC++- privacy-microsoft365 +- privacy-copilot - m365copilot - magic-ai-copilot-description: "Learn how to manage Microsoft 365 Copilot and Microsoft 365 access to web content for your organization." +hideEdit: true Last updated : 10/04/2024 # Data, privacy, and security for web queries in Microsoft 365 Copilot and Microsoft Copilot -Microsoft 365 Copilot chat and [Microsoft Copilot](/copilot/overview) chat have an optional feature that allows Copilot to reference web content when responding to user prompts. Allowing Microsoft 365 Copilot and Microsoft Copilot to reference web content improves the quality of Copilot responses by grounding them in the latest information from the web (referred to as "web grounding"). +Microsoft 365 Copilot chat and [Microsoft Copilot](/copilot/overview) chat have an optional feature that allows Copilot to reference web content when responding to user prompts. Allowing Microsoft 365 Copilot and Microsoft Copilot to reference web content improves the quality of Copilot responses by grounding them in the latest information from the web. -## Web grounding +## Web search -When web grounding is enabled, Microsoft 365 Copilot and Microsoft Copilot may fetch information from the Bing search service when information from the web will help provide a better, more grounded response. Admin controls and a user-level web content plugin toggle (only for Microsoft 365 Copilot) are available to [manage whether web grounding is enabled](#controls-available-to-manage-web-grounding) in your environment. +When web search is enabled, Microsoft 365 Copilot and Microsoft Copilot may fetch information from the Bing search service when information from the web will help provide a better, more grounded response. Admin controls and a user-level web content plugin toggle (only for Microsoft 365 Copilot) are available to [manage whether web search is enabled](#controls-available-to-manage-web-search) in your environment. -### How web grounding works +### How web search works -When web grounding is enabled, Microsoft 365 Copilot and Microsoft Copilot parse the user’s prompt and identifies terms where web grounding would improve the quality of the response. Based on these terms, Copilot generates a search query that it sends to the Bing search service asking for more information. +When web search is enabled, Microsoft 365 Copilot and Microsoft Copilot parse the user’s prompt and identifies terms where web search would improve the quality of the response. Based on these terms, Copilot generates a search query that it sends to the Bing search service asking for more information. -This generated search query is different from the user’s original prompt—it consists of a few words informed by the user’s prompt. When using Microsoft 365 Copilot, the generated query won't include the entirety of a Microsoft 365 documents associated with the prompt. However, it may also be informed by data within a Microsoft 365 document under the following conditions: +This generated search query is different from the user’s original prompt—it consists of a few words informed by the user’s prompt. When using Microsoft 365 Copilot, the generated query doesn't include the entirety of a Microsoft 365 documents associated with the prompt. However, it may also be informed by data within a Microsoft 365 document under the following conditions: - When a user enters a prompt into Copilot inside an Office application (for example, writing a prompt into Copilot in Microsoft Word while a relevant document is open). The user's prompts and Copilot's responses are stored within Microsoft 365 and n After Microsoft 365 Copilot and Microsoft Copilot receive additional information from the Bing search service, this information is used to compose the response returned to the user. -When a Microsoft 365 Copilot user submits their prompt with the web content plugin toggle (that is, web grounding) turned on, they may receive two separate responses: +When a Microsoft 365 Copilot user submits their prompt with the web content plugin toggle (that is, web search) turned on, they may receive two separate responses: -1. If resources are found within Microsoft 365, the user will see: +1. If resources are found within Microsoft 365, the user sees: - **From your company's resources, emails, Teams messages, etc.** -2. If resources are found outside of Microsoft 365, the user will see: +2. If resources are found outside of Microsoft 365, the user sees: - **From the web:** -The user can see results from both. Additionally, if the results are from the web only, the user will see the same **From the web:** heading. +The user can see results from both. Additionally, if the results are from the web only, the user sees the same **From the web:** heading. ### Examples of generated search queries The following table provides multiple examples of a user's prompt and the genera > [!NOTE] > Unlike with Microsoft 365 Copilot, users can't invoke organizational content like files, emails, or chats, when prompting in Microsoft Copilot chat. For examples of purely web-based user prompts for Microsoft Copilot, see [Generated search queries](/copilot/privacy-and-protections#generated-search-queries). -| User prompt | Generated search queries | How Copilot provides a response | -|--|-|| -| Who is my manager and what public information is available about them? | [Manager name] | Copilot will find the name of the user's manager from Microsoft 365 data. It will then generate a Bing search query based on their name to see what information about them is available on the web. | -| I'm looking for a document authored last week by [coworker]. | None | Copilot will return documents by [coworker] found in Microsoft 365 data. No web queries are generated. | -| We're considering a possible acquisition of Fabrikam. Summarize financial information about the company, including their business strategy. | Fabrikam strategy<br>Fabrikam financials | Copilot will return a response with two sections. One is headlined "From your company's data" that references information the user has access to in Microsoft 365. The other is headlined "From the web," which includes any publicly available information. | -| What decision did [coworker] make about shipping our Contoso product? | [Coworker name] decision about shipping Contoso product | Copilot will return a response based on information the user has access to in Microsoft 365.<br>Because there's no relevant information available on the web, Copilot doesn't include information from the web in the response. | -| Summarize [internal strategy document about clean energy] and tell me if Fabrikam has publicly announced a similar approach. | Fabrikam clean energy policy announcements | The user explicitly includes a reference to a specific document in Microsoft 365. Copilot reasons over this document and identifies "clean energy policy" as a major theme. "Clean energy policy" is added to the generated search query sent to the Bing search service (the document itself isn't included).<br>Copilot then takes web results returned from Bing and identifies any similarities between this public information and the strategy described in the internal document. | +| User prompt | Generated search queries | How Copilot provides a response | +||-|--| +| Who is my manager and what public information is available about them? | [Manager name] | Copilot finds the name of the user's manager from Microsoft 365 data. It then generates a Bing search query based on their name to see what information about them is available on the web. | +| I'm looking for a document authored last week by [coworker]. | None | Copilot returns documents by [coworker] found in Microsoft 365 data. No web queries are generated. | +| We're considering a possible acquisition of Fabrikam. Summarize financial information about the company, including their business strategy. | Fabrikam strategy<br>Fabrikam financials | Copilot returns a response with two sections. One is headlined "From your company's data" that references information the user has access to in Microsoft 365. The other is headlined "From the web," which includes any publicly available information. | +| What decision did [coworker] make about shipping our Contoso product? | [Coworker name] decision about shipping Contoso product | Copilot returns a response based on information the user has access to in Microsoft 365.<br/><br/>Because there's no relevant information available on the web, Copilot doesn't include information from the web in the response. | +| Summarize [internal strategy document about clean energy] and tell me if Fabrikam has publicly announced a similar approach. | Fabrikam clean energy policy announcements | The user explicitly includes a reference to a specific document in Microsoft 365. Copilot reasons over this document and identifies "clean energy policy" as a major theme. "Clean energy policy" is added to the generated search query sent to the Bing search service (the document itself isn't included).<br/><br/>Copilot then takes web results returned from Bing and identifies any similarities between this public information and the strategy described in the internal document. | ### How Microsoft handles generated queries Microsoft 365 Copilot and Microsoft Copilot both use generated search queries sent to the Bing search service to ground responses in web data. The way Microsoft handles these queries is identical in both services. -Generated search queries sent to the Bing search service have the user and tenant identifiers removed. They aren't shared with advertisers. Also, web grounding queries sent to Bing do **not** impact any of the following: +Generated search queries sent to the Bing search service have the user and tenant identifiers removed. They aren't shared with advertisers. Also, web search queries sent to Bing do **not** impact any of the following: - Search Ranking - Answers or features like Rich Captions Generated search queries sent to the Bing search service have the user and tenan The Bing search service operates separately from Microsoft 365 and has different data-handling practices. The use of Bing is covered by the [Microsoft Services Agreement](https://www.microsoft.com/servicesagreement) between each user and Microsoft, together with the [Microsoft Privacy Statement](https://www.microsoft.com/privacy/privacystatement). The [Microsoft Products and Services Data Protection Addendum (DPA)](https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA) doesn't apply to the use of web content plugin in Microsoft 365 Copilot, Microsoft Copilot, or the Bing search service. -## Controls available to manage web grounding +## Controls available to manage web search -To manage web grounding so it aligns with organizational policies, user preferences, and security considerations, two distinct controls are introduced: one for IT Administrators and another for end-users (only for Microsoft 365 Copilot). +To manage web search so it aligns with organizational policies, user preferences, and security considerations, two distinct controls are introduced: one for IT Administrators and another for end-users (only for Microsoft 365 Copilot). ### IT administrator control for both Microsoft 365 Copilot and Microsoft Copilot -Web grounding in both Microsoft 365 Copilot and Microsoft Copilot is part of optional connected experiences for Microsoft 365. The [privacy setting for optional connected experiences](/microsoft-365-apps/privacy/manage-privacy-controls#policy-setting-for-optional-connected-experiences) allows IT admins to either enable or disable web grounding for users or user groups across the tenant they manage in accordance with their organization’s policies, data privacy laws, or other regulatory requirements. This applies to both Microsoft 365 Copilot and Microsoft Copilot. +Web search in both Microsoft 365 Copilot and Microsoft Copilot is part of optional connected experiences for Microsoft 365. The [privacy setting for optional connected experiences](/microsoft-365-apps/privacy/manage-privacy-controls#policy-setting-for-optional-connected-experiences) allows IT admins to either enable or disable web search for users or user groups across the tenant they manage in accordance with their organization’s policies, data privacy laws, or other regulatory requirements. This applies to both Microsoft 365 Copilot and Microsoft Copilot. -If optional connected experiences, and thereby web grounding, are enabled, Microsoft 365 Copilot users within the tenant can choose for themselves whether to enable or disable web grounding using the web content plugin toggle. The web content plugin toggle isn't available as part of the Microsoft Copilot user experience. +If optional connected experiences, and thereby web search, are enabled, Microsoft 365 Copilot users within the tenant can choose for themselves whether to enable or disable web search using the web content plugin toggle. The web content plugin toggle isn't available as part of the Microsoft Copilot user experience. -When optional connected experiences are disabled for users or user groups by an IT admin, web grounding is disabled in Microsoft 365 Copilot and Microsoft Copilot for those users within the tenant. This setting would override a Microsoft 365 Copilot user’s selection with the web content plugin toggle, and they can't override this setting. +When optional connected experiences are disabled for users or user groups by an IT admin, web search is disabled in Microsoft 365 Copilot and Microsoft Copilot for those users within the tenant. This setting would override a Microsoft 365 Copilot user’s selection with the web content plugin toggle, and they can't override this setting. Disabling optional connected experiences restricts Microsoft Copilot, Microsoft 365 Copilot, and multiple experiences across Microsoft 365. Disabling optional connected experiences restricts Microsoft Copilot, Microsoft The web content plugin end user toggle offers individual control over whether or not they want real-time web content in Microsoft 365 Copilot responses based on their personal preference. The end user toggle is only available as part of work chat in Microsoft 365 Copilot. -If optional connected experiences are enabled, this setting is enabled by default. When enabled, the user will receive responses grounded in real-time web content. If the IT admin has disabled optional connected experiences, this option isn't available to the Microsoft 365 Copilot user as part of work chat and web grounding is disabled. +If optional connected experiences are enabled, this setting is enabled by default. When enabled, the user receives responses grounded in real-time web content. If the IT admin disables optional connected experiences, this option isn't available to the Microsoft 365 Copilot user as part of work chat and web search is disabled. If a Microsoft 365 Copilot user disables the web content plugin in work chat, web content isn't included in Copilot responses. -Microsoft 365 Copilot users can manage web grounding in work chat by following these steps: +Microsoft 365 Copilot users can manage web search in work chat by following these steps: 1. Select the plugin menu at the bottom right of the chat input box in Microsoft 365 Copilot when using work chat. |
| microsoft-365-copilot-privacy | Microsoft 365 Copilot Privacy | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/copilot/microsoft-365-copilot-privacy.md | When you enter prompts using Microsoft 365 Copilot, the information contained wi > [!NOTE] > - When youΓÇÖre using plugins to help Microsoft 365 Copilot to provide more relevant information, check the privacy statement and terms of use of the plugin to determine how it will handle your organizationΓÇÖs data. For more information, see [Extensibility of Microsoft 365 Copilot](#extensibility-of-microsoft-365-copilot).-> - When youΓÇÖre using the web content plugin, Microsoft 365 Copilot parses the userΓÇÖs prompt and identifies terms where web grounding would improve the quality of the response. Based on these terms, Copilot generates a search query that it sends to the Bing Search service. For more information, [Data, privacy, and security for web queries in Microsoft 365 Copilot and Microsoft Copilot](/microsoft-365-copilot/manage-public-web-access). +> - When youΓÇÖre using the web content plugin, Microsoft 365 Copilot parses the userΓÇÖs prompt and identifies terms where web search would improve the quality of the response. Based on these terms, Copilot generates a search query that it sends to the Bing Search service. For more information, [Data, privacy, and security for web queries in Microsoft 365 Copilot and Microsoft Copilot](/microsoft-365-copilot/manage-public-web-access). While abuse monitoring, which includes human review of content, is available in Azure OpenAI, Microsoft 365 Copilot services have opted out of it. For information about content filtering, see the [How does Copilot block harmful content?](#how-does-copilot-block-harmful-content) section later in this article. There's also a privacy control that turns off all connected experiences, includi #### Privacy control for optional connected experiences -If you turn off optional connected experiences in your organization, Microsoft 365 Copilot features that are optional connected experiences wonΓÇÖt be available to your users. For example, [web grounding](manage-public-web-access.md) wonΓÇÖt be available to your users. For a list of Microsoft 365 Copilot features that are optional connected experiences, see [Experiences for Microsoft 365 Copilot](/microsoft-365-apps/privacy/optional-connected-experiences#experiences-for-microsoft-365-copilot). +If you turn off optional connected experiences in your organization, Microsoft 365 Copilot features that are optional connected experiences wonΓÇÖt be available to your users. For example, [web search](manage-public-web-access.md) wonΓÇÖt be available to your users. For a list of Microsoft 365 Copilot features that are optional connected experiences, see [Experiences for Microsoft 365 Copilot](/microsoft-365-apps/privacy/optional-connected-experiences#experiences-for-microsoft-365-copilot). There's also a privacy control that turns off all connected experiences, including optional connected experiences. If you use that privacy control, Microsoft 365 Copilot features that are optional connected experiences wonΓÇÖt be available. |
| admin | Set Up Multi Factor Authentication | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/admin/security-and-compliance/set-up-multi-factor-authentication.md | f1.keywords: Previously updated : 08/10/2023 Last updated : 10/02/2024 audience: Admin |
| loop | Loop Compliance Summary | https://github.com/MicrosoftDocs/microsoft-365-docs/commits/public/microsoft-365/loop/loop-compliance-summary.md | Where the Loop content was originally created determines its storage location: |Retention policies |**[Retention policies](/microsoft-365/compliance/retention-policies-sharepoint)** are enforced.|**[Retention policies](/microsoft-365/compliance/retention-policies-sharepoint)** configured for *all SharePoint sites* are enforced and can be individually overridden per Loop workspace.| |Retention labels |**[Retention label](/purview/retention#retention-labels)** support is available through OneDrive or SharePoint.|**Not Yet Available**: <br>**[Retention label](/purview/retention#retention-labels)** is supported, but an end-user configurable experience to view or update the retention label for on each page or component isn't yet available.| |***Data Classification***|||-|Information Protection |**[Sensitivity Labeling](/microsoft-365/compliance/information-protection)** is available for all Loop pages and components.|**[Sensitivity Labeling](/microsoft-365/compliance/information-protection)** is available for all Loop pages and components, and admin configurable for each Loop workspace via PowerShell. <br><br>**Not Yet Available**: <br>**[Sensitivity Labeling](/microsoft-365/compliance/information-protection)** is configurable per Loop workspace by administrators, but not yet configurable in the Loop app by end users on each Loop workspace.| +|Information Protection |**[Sensitivity labeling](/purview/sensitivity-labels-loop)** is available for Loop pages and components.|**[Sensitivity labeling](/purview/sensitivity-labels-loop)** is available for Loop pages and components, and admin configurable for each Loop workspace via PowerShell. <br><br>**Not Yet Available**: <br>**[Sensitivity labeling](/purview/sensitivity-labels-loop)** is configurable per Loop workspace by administrators, but not yet configurable in the Loop app by end users on each Loop workspace.| |Data Loss Prevention |**[Data Loss Prevention](/microsoft-365/compliance/dlp-learn-about-dlp)** (DLP) rules are enforced on content with end-user policy tip support.|**[Data Loss Prevention](/microsoft-365/compliance/dlp-learn-about-dlp)** (DLP) rules are enforced on content with end-user policy tip support.| The following sections detail capabilities that are **not yet available** for Mi - Retention labels aren't yet available for Loop workspace content. ### Data Classification not yet available-- While sensitivity labels can be configured on each Loop page or component, **Sensitivity Labels** can't be configured at the Loop workspace level. An admin can set the Loop workspace sensitivity label using PowerShell and the workspace sensitivity label is viewable in the SharePoint Embedded admin center.+- While sensitivity labels can be configured on each Loop page or component, sensitivity labels can't be configured at the Loop workspace level. An admin can set the Loop workspace sensitivity label using PowerShell and the workspace sensitivity label is viewable in the SharePoint Embedded admin center. ## Managing Loop in your organization |