Microsoft Copilot

Incomplete and not restorable: 'Export all activity history' downloads only a CSV of prompts and responses, and Microsoft offers no import.

• Manage your Copilot activity history in the privacy dashboard

The documented export contains only prompts and responses; instructions, configuration, task definitions and identity are not included, and saved memories are not documented as included, so most of what defines the agent stays with Microsoft.

• Manage your Copilot activity history in the privacy dashboard

Copilot runs only as a Microsoft-hosted service on Microsoft-selected models; there is no exportable artifact or open-source runtime to execute it locally.

• Privacy FAQ for Microsoft Copilot

The agent is tied to the owner's Microsoft account and cannot migrate, so nobody it has dealt with can verify its continuity elsewhere.

• Privacy FAQ for Microsoft Copilot

Because the agent exists only as a hosted service tied to a Microsoft account, Microsoft controls its availability and features; there is no exported agent beyond its reach.

• Microsoft Services Agreement

Memory, connectors, browsing and Tasks are delivered by Microsoft's service on Microsoft-selected models and do not exist apart from that platform.

• Using Copilot Tasks
• Browse with Copilot

Activity history exports as CSV, an open format, but Copilot's internal state storage is undocumented and not directly accessible to the owner.

• Manage your Copilot activity history in the privacy dashboard

Microsoft does not publish Copilot's system instructions or show the owner what the service injects into model context, such as memories or personalization signals.

• Privacy FAQ for Microsoft Copilot

Microsoft states that, depending on settings, Copilot conversation history is used to further personalize ads, and Copilot can share signals with Bing, Edge and MSN; this derived data sits outside the owner's inspectable agent state.

• Privacy FAQ for Microsoft Copilot
• Microsoft Copilot for individuals: your privacy controls and choices

Prompts, responses and browsing actions are kept in conversation history, past Tasks can be reviewed, and activity history exports as CSV. Tool calls are not documented as captured, and browsing screenshots are kept only 30 days, so the history is not complete.

• Browse with Copilot
• Using Copilot Tasks

Copilot's executable logic is proprietary server-side code; Tasks are described in natural language, but the workflows that run them are not exposed as readable source.

• Using Copilot Tasks

Microsoft Advertising serves ads labeled 'Sponsored' in Copilot responses, selected using the whole conversation. Ad personalization can be turned off, but Microsoft documents no setting that turns off the ads themselves.

• About ads in Copilot (Microsoft Advertising)
• Microsoft Copilot for individuals: your privacy controls and choices

Microsoft does not document whether every consequential action in Tasks or browsing is durably recorded, or whether an action is blocked when it cannot be recorded.

• Using Copilot Tasks

Conversation history can be deleted without a detectable trace, and no tamper-evident record of actions is documented.

• Privacy FAQ for Microsoft Copilot

Microsoft does not document whether the agent layer can alter or delete records of its own actions.

• Using Copilot Tasks

Exported activity history is a CSV readable with ordinary tools, but it records prompts and responses, not a full action audit trail.

• Manage your Copilot activity history in the privacy dashboard

No record is documented that lets Copilot and the agents or services it messages match their logs of an exchange.

• Using Copilot Tasks

The Copilot runtime is proprietary and closed source.

• Microsoft Services Agreement

The owner can see only personalization and memory settings; the full server-side configuration the service runs with is not inspectable.

• Microsoft Copilot for individuals: your privacy controls and choices

Emails and messages go out under the connected accounts' own authentication, so recipients cannot verify that they came from this agent under the owner's authority.

• Connecting Microsoft Copilot to other services

No action record is offered whose integrity can be checked with open tools that do not depend on Microsoft.

• Privacy FAQ for Microsoft Copilot

The owner cannot obtain the agent's full state, so cannot verify whether it changed between two points in time.

• Manage your Copilot activity history in the privacy dashboard

The owner can shape responses through saved memories and personalization, but cannot read or rewrite Copilot's underlying system instructions.

• Microsoft Copilot for individuals: your privacy controls and choices

Saved memories can be viewed, edited and deleted individually or all at once, and memory can be switched off. Personalization signals shared with Bing, Edge and MSN cannot be managed item by item in Copilot.

• Privacy FAQ for Microsoft Copilot
• Microsoft Copilot for individuals: your privacy controls and choices

The owner can create and schedule Tasks in natural language but cannot change the agent's underlying code or workflows.

• Using Copilot Tasks

The owner can link or unlink the connectors Microsoft offers (for example Outlook, OneDrive, Gmail and Google Drive) and turn off web search, but cannot add arbitrary third-party tools.

• Connecting Microsoft Copilot to other services
• Microsoft Copilot for individuals: your privacy controls and choices

Copilot runs on models Microsoft selects; the owner cannot choose arbitrary or local open-weight models.

• Privacy FAQ for Microsoft Copilot

Changes beyond the settings Microsoft exposes (instructions, logic, models) require Microsoft's own action and are not open to the owner.

• Microsoft Services Agreement

Owners control which connectors are linked, and Copilot asks before sending emails or messages, but owners cannot set which recipients or channels are allowed, and no enforcement below the model is documented.

• Using Copilot Tasks
• Connecting Microsoft Copilot to other services

Copilot requires approval before purchases, submitting personal information, sending messages and deleting files, but the gated actions are fixed by Microsoft rather than chosen by the owner.

• Using Copilot Tasks
• Browse with Copilot

Microsoft documents that a running task can be stopped at any time, scheduled tasks can be paused or deleted, and the owner can interrupt or take control of browsing sessions.

• Using Copilot Tasks
• Browse with Copilot

All content is processed on Microsoft servers, and conversations may be used for model training unless the owner opts out (with some regional and age exclusions); they may also inform ad personalization.

• Privacy FAQ for Microsoft Copilot

The owner can revoke connectors at any time, but Microsoft holds the OAuth grants, the owner cannot inspect them, and they cannot move with the agent.

• Connecting Microsoft Copilot to other services

The owner can delete individual conversations, all activity history and memories; conversations are otherwise kept 18 months by default. Microsoft does not fully document retention of derived or de-identified data after deletion.

• Privacy FAQ for Microsoft Copilot
• Manage your Copilot activity history in the privacy dashboard