
Explanation:
Box: Enterprise data protection (EDP)
Enterprise Data Protection (EDP) in Microsoft 365 Copilot is a set of security and privacy commitments designed to protect your organization's sensitive information.
Key protections provided by EDP include:
No AI Training: Your prompts, Copilot's responses, and any data accessed via Microsoft Graph (like emails, files, and chats) are not used to train Microsoft's foundational large language models (LLMs).
Tenant Isolation: Your data stays within the Microsoft 365 service boundary and is logically isolated from other organizations' data.
Respects Permissions: Copilot inherits your organization's existing access controls and Microsoft Purview sensitivity labels, ensuring users only see data they are already authorized to access.
Compliance Standards: It adheres to major regulatory standards, including GDPR, ISO/IEC
27018, and the Microsoft Data Protection Addendum (DPA).
Secure Web Queries: Even when using web grounding via Bing, queries are de-identified and handled separately to maintain your privacy.