The answer depends on which Copilot you mean
It’s one of the most common AI questions we hear from customers right now: “Which ChatGPT or Copilot features do we actually have with our Microsoft subscription?”
The answer might be more nuanced than you realize.
Microsoft now uses the Copilot name across several tools, and the difference matters.
Some features are included with eligible Microsoft 365 subscriptions.
Others require an additional license. Some can work with your business data. Others cannot.
The simplest answer: you may have access to Microsoft 365 Copilot Chat, but that is not the same as having Microsoft 365 Copilot.
ChatGPT, Copilot Chat, and Microsoft 365 Copilot are not the same thing
ChatGPT is made by OpenAI. It is not part of Microsoft 365, and it does not come with your Microsoft subscription.
Employees may use ChatGPT through a personal account, an individual paid plan, or an approved business workspace. Those are very different from a governance perspective. A personal ChatGPT account sits outside your Microsoft environment, so it should not be treated as an approved place for client data, financial information, internal documents, or other sensitive business content.
Microsoft Copilot is Microsoft’s AI brand. For most organizations, there are three main Microsoft buckets to understand, plus ChatGPT, which sits outside Microsoft 365 entirely.
| Tool | What it is | What it can access | Best for |
| ChatGPT | A standalone AI tool made by OpenAI | Depends on the account and workspace being used. It is not part of Microsoft 365. | General writing, brainstorming, summarizing, and research outside your Microsoft environment |
| Microsoft 365 Copilot Chat | The AI chat experience is included with eligible Microsoft 365 subscriptions | Primarily web-grounded information, with enterprise data protection | General AI assistance inside a work-approved Microsoft experience |
| Microsoft 365 Copilot | The paid Microsoft 365 add-on | Work context from Microsoft 365 apps and data, depending on licensing, permissions, and configuration | Summarizing meetings, finding information, drafting content, analyzing files, and working across Microsoft 365 |
| Microsoft Security Copilot | An AI tool for security and IT operations | Security signals, alerts, incidents, and related Microsoft security data, depending on licensing and configuration | Security operations, threat investigation, and IT administration |
Microsoft 365 Copilot Chat
Microsoft 365 Copilot Chat is the AI chat experience included at no additional cost for eligible Microsoft 365 users.
It can help with general questions, writing, summarizing, brainstorming, and web-grounded research. It also includes enterprise data protection, which makes it a better starting point for work use than unmanaged personal AI accounts.
The key limitation is grounding. Copilot Chat is primarily grounded in web data, not your organization’s emails, Teams chats, SharePoint sites, or OneDrive files. It may be aware of content you have open in some Microsoft 365 apps, and users may be able to upload or reference files depending on configuration, but it is not the full “work-aware” Copilot experience.
Simply put: Copilot Chat can be useful, but it does not automatically understand your business.
Microsoft 365 Copilot
Microsoft 365 Copilot is the paid add-on. This is the version that connects more deeply to your Microsoft 365 environment.
With the right licensing and configuration, it can use work context from sources such as emails, files, meetings, chats, calendars, SharePoint, OneDrive, Teams, Word, Excel, PowerPoint, and Outlook. That is what makes it powerful. It is also why Copilot readiness matters.
If permissions are too broad, Copilot may surface information people technically have access to, even if they should not. If SharePoint is cluttered with outdated files, duplicate versions, or unclear ownership, Copilot may summarize that confusion back to you. AI does not fix information governance. It makes the current state of your environment more visible.
Microsoft Security Copilot
Security Copilot is different again. It is designed for security operations, IT, and administration use cases, not everyday productivity tasks. Depending on your licensing, it may be available through certain Microsoft enterprise security plans, but it should be considered a security tool rather than a general business assistant.
If you are trying to understand how secure your Microsoft environment is today, Microsoft Secure Score can also be a useful starting point. We explain what it measures, and what it does not, in our guide to Microsoft Secure Score for SMB security.
What changed in April 2026?
In April 2026, Microsoft changed how Copilot Chat appears inside core Microsoft 365 apps for users without a paid Microsoft 365 Copilot license.
The main takeaway: if your team had been using Copilot Chat inside apps like Word, Excel, PowerPoint, or OneNote, the experience may now be reduced, labeled differently, or unavailable depending on your licensing and tenant configuration.
For smaller organizations, some Copilot Chat access may still appear in Microsoft 365 apps, but on “standard access.” That means quality and performance can vary based on Microsoft service capacity. Users may also see prompts encouraging an upgrade to the paid Microsoft 365 Copilot license.
This is why the original question needs a more nuanced frame. It’s not just: “Do we have Copilot?”
A more useful question is: “Which Copilot experience do we have, where is it available, and what data can it access?”
Why this matters for your business
The confusion isn’t just a licensing annoyance. It creates real operational risk.
When employees are unsure which AI tools are approved, they often use their own. That can lead to client information, financial details, HR content, or internal documents being pasted into tools your organization hasn’t reviewed.
It can also create a false sense of confidence. Someone may assume Copilot is using company data when it is only responding based on publicly available information. Or they may assume a personal AI account is safe for work because it resembles the tool they see in Microsoft 365.
The result is shadow AI: AI use happening outside the policies, permissions, and oversight your business depends on. If you are not sure which AI tools your team is already using, a Shadow AI Discovery can help surface where exposure exists before it becomes a governance problem.
Should you buy Microsoft 365 Copilot?
Maybe, but it shouldn’t be an impulse purchase.
Microsoft 365 Copilot can be valuable when it supports clear workflows, such as summarizing meetings, drafting documents, finding information across Microsoft 365, analyzing spreadsheets, or helping teams move faster inside the tools they already use.
Before buying it broadly, review three areas:
- Permissions: Can people only access the files and sites they should?
- Data quality: Are important documents current, organized, and easy to identify?
- Use cases: Which roles or teams would get measurable value from Copilot?
For many organizations, the best first step isn’t buying more licenses. It’s understanding what is already available, setting basic AI use guidelines, and preparing the environment so Copilot can work safely and usefully.
A Copilot readiness assessment can help you understand whether your Microsoft 365 environment is configured to support Copilot before you invest in licenses or roll it out broadly.
Where to start
Start with a simple audit:
- Which Microsoft 365 plan do you have?
- Which Copilot features are available to your users today?
- Are you seeing Copilot Chat, Microsoft 365 Copilot, or another label?
- Which AI tools are approved for business use?
- What should employees avoid pasting into any AI tool?
- Are your SharePoint, OneDrive, Teams, and permissions ready for deeper AI integration?
You don’t need a huge AI policy to begin. You need clear guidance that your team can understand and follow. If the bigger gap is policy, ownership, or acceptable use, a Governance Gap Assessment can help clarify what needs to be documented before AI adoption becomes harder to manage.
If you are unsure which Copilot features you have, what’s changed in your Microsoft 365 environment, or whether the paid Copilot license is worth it right now, we can help you sort it out.
No pressure. Just clarity about what is already in your toolkit, what is safe to use, and what may be worth adding next. Start a conversation.
FAQs
Is Copilot included with Microsoft 365?
Some Copilot features are included with eligible Microsoft 365 subscriptions, usually through Microsoft 365 Copilot Chat. The full Microsoft 365 Copilot experience requires an additional paid license.
Why is “Do we have Copilot?” a more nuanced question now?
Because “Copilot” can refer to different Microsoft AI experiences. Your organization may have access to Copilot Chat, but that does not necessarily mean you have the paid Microsoft 365 Copilot add-on or the same level of access inside every Microsoft 365 app.
Is Microsoft 365 Copilot Chat the same as Microsoft 365 Copilot?
No. Copilot Chat is primarily web-grounded AI chat. Microsoft 365 Copilot is the paid, deeper Microsoft 365 experience that can use work context from your organization’s apps and data, depending on licensing and configuration.
Is ChatGPT included in Microsoft 365?
No. ChatGPT is made by OpenAI and is not included with a Microsoft 365 subscription. If employees use ChatGPT for work, it should be through an approved account and with clear rules about sensitive data.
Should our business buy Microsoft 365 Copilot?
It depends on your goals and your readiness. Before making broad purchases, review permissions, clean up key data locations, and identify the teams or workflows where Copilot would create measurable value.
How do we know if our Microsoft 365 environment is ready for Copilot?
A readiness review should assess permissions, data protection, sharing settings, security configurations, and governance. The goal is to understand what needs attention before deploying Copilot.
Frequently asked questions
What’s the difference between AI and automation?
Automation makes repeatable work run on its own by following steps you’ve defined. AI is software that reads, classifies, or generates based on patterns. AI is often one step inside an automated process – not a replacement for it.
Do I need to document my processes before automating?
Yes, at least informally. You don’t need a formal process map, but you do need to write down how the work actually happens before you buy a tool. Automation projects most often stall because nobody agreed on the steps first.
0 Comments