Start with the account you use
A familiar product name is only a starting point. Your plan, account type, region and enabled features can change which disclosure applies.
Personal Microsoft accounts, Microsoft 365 home apps, and organizational accounts are separate contexts. Each context binds only its specifically reviewed relationships.
Personal account
Copilot — Microsoft 365 home apps
This covers Copilot inside Microsoft 365 apps for home. The reviewed page does not establish which outside companies handle requests on each home subscription.
Which account and features this covers
Copilot used inside Microsoft 365 apps for home with a personal Microsoft account.
No named connection is established for this context in the reviewed sources available here. The research remains incomplete.
When this applies
- Separate from the standalone Copilot app and organizational Copilot documentation.
- The source names Personal, Family, Premium and Pro plans; it does not establish separate recipient routes for those plans.
What we cannot establish
- Named provider routes and differences between the home plans are not established by the reviewed page.
- Enterprise supplier disclosures do not apply merely because a plan uses the Copilot name.
Account scope reviewed .
Explore Copilot — Microsoft 365 home appsPersonal account
Copilot — personal Microsoft account
This covers the updated Copilot app used with a personal Microsoft account. The reviewed page does not establish the names of outside companies handling your requests.
Which account and features this covers
Updated Microsoft Copilot app on web, desktop or mobile using a personal Microsoft account, as described by the August 18, 2026 version notice.
No named connection is established for this context in the reviewed sources available here. The research remains incomplete.
When this applies
- The official page routes work/school accounts and Copilot inside Microsoft 365 home apps to separate privacy documentation.
- Features vary by subscription and app version.
What we cannot establish
- This review establishes the personal-account scope, not named external model or infrastructure recipients.
- The enterprise Anthropic/OpenAI relationships are not bound to this context.
Account scope reviewed .
Explore Copilot — personal Microsoft accountWork or organization account
Copilot — work or school account
Some work or school Copilot features can use models run by OpenAI or Anthropic; Microsoft-run models are a separate case. Availability depends on the feature, your organization’s settings and location, and this list excludes Anthropic options with separate agreements.
Which account and features this covers
Selected externally operated AI-model routes within Microsoft enterprise Online Services, subject to tenant, user, feature and model eligibility.
2 selected named connections are supported for this account context. This is not a complete supplier list.
- OpenAIProviding OpenAI-operated models for enterprise Copilot experiences
- AnthropicProviding Anthropic-operated models for enterprise Copilot experiences
When this applies
- These selected links cover provider-operated models under Microsoft’s subprocessor framework; they do not establish use for every prompt.
- Anthropic model availability differs by geography, cloud, user permissions and opt-in settings.
- Anthropic models with Data Retention that use separate Anthropic agreements are excluded from this context’s subprocessor route.
- Microsoft-hosted Azure OpenAI deployments have a different provider boundary.
What we cannot establish
- This pair is not the complete organizational Copilot recipient list.
- Consumer accounts, home plans and model-specific contract exceptions require their own evidence.
Processes data on behalf of another company
OpenAI
Microsoft → OpenAI
Providing OpenAI-operated models for enterprise Copilot experiences
Applies to: Microsoft Copilot for organizations (work or school account); Microsoft Copilot Studio.
When this applies
- Applies to OpenAI-operated models made available through Microsoft enterprise Online Services, when enabled for the user or group; Microsoft-operated Azure OpenAI models are a separate deployment path.
- The page dates availability to July 9, 2026 and default enablement for eligible commercial customers to July 24, 2026; administrators can select No users or restrict access to specified users and groups.
- Copilot Studio creators select the model, and additional Power Platform administrative controls apply.
- OpenAI-operated models are unavailable in GCC, GCC High, DoD and sovereign clouds; applicable in-country processing commitments exclude these models. The page includes them in the EU Data Boundary subject to its linked exceptions.
- The Microsoft DPA and Product Terms apply subject to documented exclusions. Certain Copilot experiences use the OpenAI Responses API with Zero Data Retention subject to OpenAI's feature-specific limits.
What remains unclear
- This establishes an optional/eligible provider route, not a guarantee that every Copilot prompt is sent to OpenAI.
- No consumer Copilot, Microsoft 365 home-plan or ordinary Azure OpenAI route is established by this enterprise article.
Data, location and review details
- Data categories
- Not specified for this connection in the reviewed record. Do not assume all customer data.
- Locations
- No specific processing location established for this connection.
- Jurisdiction
- No narrower jurisdiction recorded for this claim.
- Where in the source
- Important; opening paragraphs; Manage OpenAI as a subprocessor; user/group access; Exclusions
- Source retrieved
- Document updated
- Claim independently reviewed
- · Agent review
Source: OpenAI as a subprocessor in Microsoft Online Services · Reviewed
Processes data on behalf of another company
Anthropic
Microsoft → Anthropic
Providing Anthropic-operated models for enterprise Copilot experiences
Applies to: Microsoft Copilot for organizations (work or school account); Microsoft Copilot Studio.
When this applies
- Applies to Anthropic models supplied through Microsoft enterprise Online Services with Anthropic acting as Microsoft's subprocessor, subject to tenant and user/group eligibility and model/feature selection.
- Enabled by default for most commercial-cloud customers outside the EU, EFTA and UK; those regions require administrative opt-in and are excluded from the EU Data Boundary and applicable in-country processing commitments for these models.
- Non-federal GCC customers require a separate eligible opt-in. Federal GCC, GCC High, DoD and other sovereign clouds are excluded.
- Copilot Studio creators select the model; additional Power Platform administrative controls apply.
- Anthropic models with Data Retention are excluded from this subprocessor assertion: those require separate opt-in and Anthropic agreements, with Anthropic acting as an independent processor. Some eligible Fable-class models remain within the Microsoft-subprocessor route as described by the source.
What remains unclear
- This does not establish use by every tenant, prompt, feature or consumer Microsoft account.
- Model eligibility and separate Data Retention terms can change; refresh the exact product documentation before revising scope.
Data, location and review details
- Data categories
- Not specified for this connection in the reviewed record. Do not assume all customer data.
- Locations
- No specific processing location established for this connection.
- Jurisdiction
- No narrower jurisdiction recorded for this claim.
- Where in the source
- Opening; Important; Opt-in regions and exclusions; model settings; Data Retention and Power Platform sections
- Source retrieved
- Document updated
- Claim independently reviewed
- · Agent review
Source: Anthropic models in Microsoft Online Services · Reviewed
Account scope reviewed .
Explore Copilot — work or school accountSources behind this explanation
- Microsoft Copilot for individuals: your data, privacy, and responsible AI
Source retrieved
- Copilot in Microsoft 365 apps for home: your data and privacy
Source retrieved
- OpenAI as a subprocessor in Microsoft Online Services
Source retrieved · Document updated · Latest connection review
- Anthropic models in Microsoft Online Services
Source retrieved · Document updated · Latest connection review
Retrieval records when a source was opened. Review records when a particular claim was independently checked. Neither date guarantees that a source has stayed unchanged.
Keep exploring with the limits in view
Opening another company shows its own documented relationships. Two connected disclosures do not automatically establish one route for your data.