Not legal advice · Summaries of vendors' public pages, which change often. Verify with the vendor and your contract before relying on anything here.

Does Microsoft Copilot (personal Microsoft account) train on your data?

Personal plan Microsoft · Assistant · Last verified

Depends on app version

Training default depends on which Copilot app version you use.

Short answer: Depends on app version

Microsoft says the new Copilot app (from Aug 18 2026, and Copilot on the web) does not use prompts, responses or files to train foundation models. The older app's FAQ says signed-in adult users' conversations are used for AI training unless they opt out. Note that "foundation models" is narrower than "any model".

Why this matters: The default depends on which Copilot app you use, so check your app's Privacy settings before pasting work data. Training can't be undone later. Why training matters →

5 of 13 fields confirmed from vendor pages·How to turn off training ↓

Covers: Microsoft Copilot app (web, desktop, mobile) signed in with a personal Microsoft account. Compliance fields (SOC 2, ISO, DPA, BAA) have not been checked yet for personal plans.

Personal vs business plan

The same assistant can have different data terms depending on the plan. Here is Microsoft Copilot (personal Microsoft account) next to Microsoft 365 Copilot.

What we checkedPersonal Microsoft Copilot (personal Microsoft account)Business Microsoft 365 Copilot
Trains on your data by defaultDepends on app versionNo
Data retentionOlder app: 18 months by default. New app: unknownAdmin-configurable
Data location / residencyYour region, the US, and other Microsoft locationsYes
SOC 2 Type IINot checked yetUnknown
DPA availableNot checked yetYes
BAA / HIPAANot checked yetYes

See the business plan: Microsoft 365 Copilot → Full side-by-side comparison

Summary of Microsoft's public pages as of Oct 17, 2026. Not legal advice: terms vary by plan and contract and can change. Confirm with Microsoft before relying on it.

Trains on your data by default

Depends on app version

Microsoft says the new Copilot app (from Aug 18 2026, and Copilot on the web) does not use prompts, responses or files to train foundation models. The older app's FAQ says signed-in adult users' conversations are used for AI training unless they opt out. Note that "foundation models" is narrower than "any model".

Source:

Can you turn training off?

Older app: yes. New app: no training toggle needed or listed

Older app: Profile > Privacy > Training on conversation activity / Training on voice conversations. The new app's privacy-controls page lists Memory, Shared experiences, Chat history, Web search, Personalized ads, and Edge import, with no training setting.

Source:

Data retention

Older app: 18 months by default. New app: unknown

The new-app pages checked describe how to delete chats but give no retention period.

Source:

Retention after you delete

Unknown

No post-deletion purge window found on the Copilot pages checked (old or new app).

Pages checked:

Human review of chats

Older app: yes, no opt-out. New app: feedback reviewed; otherwise unknown

Older-app FAQ: some conversations get automated and human review for product improvement and safety, with no opt-out. The new-app Transparency Note says submitted feedback is reviewed by Microsoft's operations teams.

Source:

Temporary / incognito chat

Unknown

No temporary or incognito chat mode is described on the consumer Copilot pages checked.

Data location

Your region, the US, and other Microsoft locations

From the general Microsoft Privacy Statement. Nothing Copilot-specific found.

Source:
  • microsoft.com/en-us/privacy/privacystatement · checked Oct 17, 2026
    “Personal data collected by Microsoft may be stored and processed in your region, in the United States, and in any other jurisdiction where Microsoft or its affiliates, subsidiaries, or service providers operate facilities.”

SOC 2 Type II

Not checked yet

Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed).

ISO/IEC 27001

Not checked yet

Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed).

ISO/IEC 42001

Not checked yet

Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed).

DPA available

Not checked yet

Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed).

BAA / HIPAA

Not checked yet

Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed).

Zero-retention option

Not checked yet

Not checked in this personal-plan research pass (consumer/business compliance docs not reviewed).

How to turn off training in Microsoft Copilot (personal Microsoft account)

New app (Aug 18 2026+): Microsoft says chats aren't used to train foundation models, so there's no toggle. Older app: turn off "Training on conversation activity".

Older Copilot app (web)

  1. On copilot.com, select your profile icon.
  2. Select your profile name.
  3. Select Privacy.
  4. Turn off Training on conversation activity and Training on voice conversations.

Older Copilot app (mobile)

  1. Open the menu and select your profile icon.
  2. Select Account > Privacy.
  3. Turn off Training on conversation activity and Training on voice conversations.

New Copilot app (related settings)

Settings > Personalization: turn off Saved memories, One shared experience, and Allow ads personalization if wanted.

Keep in mind

  • Older app: opting out doesn't stop use for general product improvement, ads, safety, or compliance.
  • Older app: human review can't be opted out of.
Source:

Vendor pages we monitor for this tool

We save a fingerprint (SHA-256 of the page's visible text) on every check so we can spot when a vendor edits its terms.