Microsoft Copilot in the Enterprise: From Chat to Cowork

Microsoft now sells four different offerings under the Copilot name, each with its own pricing model. If you work with Microsoft 365, you likely already have at least one of them in-house – often without realizing which one.

Microsoft Copilot in the enterprise is rarely a question of “whether we use it or not.” It is already being used. The question is, which Copilot is in use, what it can do, and what is already included in your existing licenses.

This is more than a licensing question. The tiers involve different working methods: from looking up information in chat, to AI that understands your own documents, to agents that autonomously complete multi-step tasks. And two fundamentally different pricing logics, one fixed per person and one based on consumption.

This article categorizes the four tiers, outlines the first steps beyond Copilot Chat, and highlights the points you should be aware of before your next contract renewal.

Status: September 2026. Microsoft continuously updates Copilot’s functionality, product names, and licensing structure, sometimes on a monthly basis. All information provided here is substantiated and dated according to the respective documentation status in the sources at the end. Before making a purchase decision, please verify if anything has changed since then.

Microsoft Copilot in the Enterprise: The Four Tiers

Copilot Chat: Included in Almost All Business Licenses

Copilot Chat is included in many Business and Enterprise plans at no additional cost. The decisive factor is which account someone logs in with.

When using a work account, Enterprise Data Protection applies. Microsoft states in its own documentation that inputs, responses, and data accessible via Microsoft Graph are not used to train the foundational models.¹ This is contractually secured via the Data Protection Addendum, with Microsoft acting as a data processor.

The same interface also exists for free for private individuals, without a license and sometimes entirely without logging in. The contractual commitments for enterprises do not apply there. Two employees may open seemingly the same tool, but only for one of them do the contents remain within the corporate tenant.

What Copilot Chat cannot do: know your documents, emails, and appointments. It works with what is available on the web. Therefore, the results sound general; the model has no connection to your business. You can manually upload individual files, and Copilot will then work with them. Automatic access to the company's internal data is missing.

A detail that matters when purchasing: Microsoft now distinguishes between Basic and Premium versions. The documentation explicitly states that Copilot Chat (Basic) and Microsoft 365 Copilot (Basic) cannot use organizational data via Microsoft Graph.⁶ Access to your data therefore depends on the correct license variant, not the product name. Before renewal, it's worth checking the fine print.

Microsoft 365 Copilot: When Texts Should Sound Like Your Company

If you want AI texts to sound like your own company, you quickly look for integration with your own documents, emails, and appointments. This is exactly what the paid license provides: Copilot sits directly in Word, Excel, PowerPoint, Outlook, and Teams and knows your content.

The add-on price ranges between 20 and 30 Euros per person per month, depending on the plan. If you already need Business Premium, the bundle offer is usually more cost-effective than a basic plan plus a separate add-on.²

What is Actually Connected

Copilot accesses documents, emails, calendars, chats, meetings, and contacts via Microsoft Graph, and only what the respective user has at least read rights for.¹ Behind this lies a semantic index that is automatically created and cannot be switched off.

Its documentation contains three points that do not appear in any product presentation and that you should be aware of before rollout:⁷

• Word, PowerPoint, PDF, OneNote, and websites are indexed. Excel files are not on the list. If you manage your figures in spreadsheets, you should not expect enterprise-wide search over them.
• Shared and delegated mailboxes are not indexed. This affects every business with an info@ or accounting@ collective mailbox.
• New SharePoint documents, to which multiple people have access, are indexed daily, not in real-time.

Third-party systems such as CRM, ticket systems, or wikis can be connected via Copilot Connectors. Microsoft lists over a hundred pre-built connectors, including Salesforce, ServiceNow, Confluence, Jira, HubSpot, and various databases. For SAP ERP, there is no Microsoft-native connector; a partner is needed there. Important for billing: connecting is documented as free with a Copilot license; without an add-on license, consumption-based billing applies.

What Each Program Can Do

Word. Drafts from a prompt, drafts based on existing files, summarizing, rewriting, converting text to tables. Up to 20 files can be referenced, and Word, PowerPoint, PDF, and TXT from SharePoint or OneDrive are allowed.

In practice, the utility is described as more granular than marketing suggests. Users consistently report that Copilot in Word is good at rephrasing individual paragraphs and summarizing long documents, but it is not a document-wide editor. If you have a 40-page document revised entirely, you often get formatting drift: templates revert to Word defaults, numbering breaks. Copilot cannot restructure layouts, text boxes, or headers anyway; it's about content.

Excel. This is where the most changes have occurred in 2026. Copilot works in three modes: direct editing, a planning mode with approval before execution, and a pure analysis mode without changes. Documented functionalities include creating and renaming worksheets, changing values and ranges, conditional formatting, formulas across multiple sheets, charts and pivot tables, and data import from other workbooks. Microsoft explicitly states that dashboards and templates can also be generated from scratch.⁸

Two prerequisites are documented and often overlooked: Calculation options must be set to Automatic, and a file checked out in SharePoint blocks editing. The previously circulating rule that AutoSave is mandatory no longer strictly applies.

From user experience, three recurring observations emerge: The greatest documented benefit lies in analyzing existing data (explaining formulas, finding errors, comparing two file states) rather than building new structures. Copilot in Excel only sees the open workbook; references to a second file fail. And the most common complaint concerns formula suggestions directly in the cell, which often interfere with typing. When introducing Copilot in Excel, this function should be consciously configured.

PowerPoint. Here, Microsoft's own documentation confirms an observation that many are familiar with from practice: The result depends on the template. It explicitly states that Copilot primarily uses your slide masters, and that it falls back to the slide master if the template contains too few master slides, which leads to weaker results. Generic layouts, minimal formatting, and slides that do not match the brand are then mentioned.⁹

Practically, this means: a template with pre-filled sample slides for title, agenda, content, data visualization, process, and conclusion changes the result more than any prompt. User reports go in the same direction and add a nuance: those who want to fill a fixed-format company presentation with new figures also encounter problems if the template is not cleanly set up. The difference lies less between "create new" and "supplement" than between a well-maintained and poorly maintained master. An independent practical test by heise in June 2026 came to the same core finding: those who want to generate according to fixed layout specifications need many detours.¹⁰

Two documented limitations: when generating from a prompt, only one output language is supported, and Copilot does not change font or placeholder sizes if text doesn't fit.

Outlook. Copilot drafts emails, summarizes threads, and provides phrasing suggestions. Important for expectations: The draft is created in the open compose window, the user accepts it with a click and sends it. That Copilot proactively places a finished reply in the drafts folder is not described in the documentation.

There is one exception: the "Prioritize my inbox" function continuously assesses incoming emails for importance, without anyone initiating a prompt. Copilot thus proactively sorts here but does not proactively formulate.

Teams. Summaries, action items, follow-up questions about the meeting. This is the function most consistently cited in user reports as a time-saver, alongside finding old content through search. Two limitations are documented: Copilot does not work in externally hosted meetings, and a transcription must be available for post-meeting queries. A third practical observation is that in-person meetings with a shared microphone yield significantly poorer results due to the lack of speaker separation.

Where This Tier Ends

What doesn't happen here yet is multi-step work. You give instruction after instruction, check the result, and assemble it yourself. Copilot writes the text for you; inserting and sending remain your responsibility. Microsoft aptly describes its own ambition in the documentation: to provide useful drafts and summaries, rather than fully automating these tasks.¹

The prerequisite that is often underestimated: tidy access rights. Copilot finds everything a person is technically allowed to access. A table that was too broadly shared years ago thus becomes discoverable.

Copilot Studio: Agents That Live Up to Their Name

From here, you build yourself – agents that live up to their name and act autonomously. Copilot Studio is the environment for this: draft proposals according to your template, onboarding questions, recurring review routines.

The boundary to the previous tier is clearly drawn in Microsoft's documentation. The agents you can build with a pure Copilot license depend on user initiation. The comparison table explicitly states that proactive interactions are not supported.¹¹ This is precisely the transition: as long as Copilot only responds, inserting and sending remain manual work. Only with event triggers does an agent react autonomously, for example, to an incoming email, a new file in SharePoint, or a schedule.

A detail that determines security here: these event triggers run under the credentials of the person who built the agent. Microsoft itself points out that users can gain access to information available to the author through this. Whoever builds agents thereby determines whose rights they act with.

For getting started, this often costs nothing extra. Anyone who merely uses a published agent does not need their own license – Microsoft explicitly states that users of an agent do not require a separate license.³ Internal agents within Microsoft 365 can be created with an existing Copilot license, limited by unspecified fair-usage limits.

Additional costs arise as soon as you go beyond Microsoft 365: agents on your own website, on the phone, for people without a license, or agents that react autonomously to events.

What you need are one to two people with time and mandate. This role is called AI Champion by us and belongs to Pillar 3, Organization: responsible for coordination, integration, and empowerment. In smaller organizations, one person is sufficient for the entire company. Beyond a certain size, each department should have someone who uses or is supposed to use AI – the use cases in sales are different from those in accounting.

Copilot Cowork: Delegating Entire Work Packages

Cowork has been generally available since June 2026.⁴ It doesn't answer questions but executes multi-hour tasks across several applications and delivers a result.

Billing is consumption-based, in addition to the license. The price per task results from model usage, context retrieval, tool calls, and runtime. Without a described process and quantity framework, this cannot be calculated.

Two details rarely appearing in proposals: Cowork is deactivated by default. And the spending policy, through which it is enabled, acts as access control, not a budget, according to Microsoft documentation – a very low limit still grants full access.

If the name sounds familiar: Microsoft integrated the underlying technology with Anthropic. The difference to the private variant lies in its isolation. The work runs in an isolated environment without access to local files, with a log and an approval step.

Why This Can Feel Tedious for Some

Those accustomed to agentic tools outside the Microsoft world, such as Claude with MCP integration or Codex, may initially find the enterprise variant cumbersome. This assessment is regularly found in professional communities, and the diagnosis there is remarkably consistent: the underlying models are sometimes the same; the difference lies in the wrapper. Mentioned are a lack of context across multiple work steps, no selectable effort for "thinking," a smaller toolset, and a multitude of interfaces, each with its own capabilities.

Opposing this is an argument that executives should take seriously: a part of this friction arises precisely from the protection mechanisms for which the enterprise variant is purchased. Confidentiality classifications are respected, access rights are checked, actions are logged, and processing remains within the tenant's boundaries. A frequently reported practical case: an agent is supposed to create tasks from emails, and IT rejects the necessary permission. This is not a product error, but a trade-off.

Those who want full autonomy must grant rights that an IT department reviews for good reasons. Microsoft is visibly working to make this path easier. It is not yet complete.

What Microsoft is Shifting Downwards – and Why the Time Window Matters

Functionality is moving downwards. What justifies the expensive tier today is often included in the standard in twelve months. Microsoft has repeatedly moved features from higher tiers into more broadly available plans in recent months.

For you, this means two things.

Short-term: Do not buy the full suite for everyone because one feature is impressive. Examine which department actually needs it.

Medium-term: The advantage comes from practice. If everyone has a feature in a year, those who have learned to use it effectively by then will have an advantage. This learning time cannot be bought back.

This is precisely where the opportunity currently lies for a pioneering role in your own industry. In most sectors, competitors are still working at Tier 0, often without knowing it. Those who now cleanly bring two departments to Tier 1 and build a first agent gain a lead that is built through processes rather than software.

The First Steps Beyond a Pure Copilot Chat License

This sequence has proven effective in our projects.

First: Account Inventory. Clarify who is working with which account. If colleagues are using the free version with private access, this is the most urgent point – and one that can be resolved in a few days.

Second: Collect Use Cases Instead of Buying Licenses. Ask three departments to name two recurring tasks that consume time. Writing proposals, preparing minutes, pre-sorting inquiries. This will show who needs Tier 1.

Third: Check Access Rights Before Copilot Searches Your Files. Who has access to which folders? This cleanup effort is the most unpopular and most important step.

Fourth: Appoint an AI Champion. One person, accessible, with dedicated time. Without this role, every introduction remains a side project.

Fifth: Eliminate Language Traps. Establish a brief house rule for AI-generated texts: no introductory clichés, no standard bullet points, address and use technical terms as is customary in-house. This addresses the feedback from the beginning.

Sixth: Build a First Agent. A process that someone manually performs every week. Start small so the benefit becomes visible.

In practice, there is often an entire tier between "paid for" and "used." Every company should get the most out of the licenses it already pays for.

Data and Sovereignty: Four Points You Should Be Aware Of

Governance around Copilot is now manageable – the tools for it are available. Nevertheless, you should actively check four points because they concern default settings.

Flex Routing. Microsoft documents that AI processing can leave the EU data boundary during peak loads, specifically to the USA, Canada, or Australia. For tenants created after March 25, 2026, this function is activated by default.⁵ Stored data remains in the EU; processing does not necessarily. Found in Copilot settings under "Flex-Routing during peak load times."

Anthropic Models. Cowork runs, among other things, on Anthropic models. According to Microsoft, these are exempt from the EU data boundary and from the processing commitments in the respective country.¹ Those who do not want this do not have to forgo Cowork: the Anthropic model family can be disabled tenant-wide or for individual groups. Cowork remains usable and then selects from the other available models.

Web Search Queries. Web search queries run via Bing and also do not fall under the EU data boundary.¹

Third-Party Agents and Connectors. Microsoft explicitly points out that you should review the privacy policy and terms of use of the respective provider for agents.¹ An integrated connector can transfer data to locations not intended in any release.

If you want to position yourself more independently in this regard, there is a second way: your own AI operating system based on a digital memory – a structured knowledge repository that belongs to you and to which changing models can be connected. We have described which dependencies need to be considered in our article on Vendor Risk and Exit Plan.

Frequently Asked Questions

Do we need Copilot Studio for all employees? No. Anyone who only uses an agent does not need their own license. For getting started, one to two people who build agents are sufficient.

Are our inputs used for training? When used with a work account, Microsoft states that inputs, responses, and Graph data are not used to train the foundational models. These contractual commitments do not apply to the free private variant.

From what company size is Cowork worthwhile? Size is less decisive than three other things: a describable recurring process, someone with administrative rights for the spending limit, and someone who professionally approves the results. A company with 80 people and a good service provider meets this just as well as a larger one with its own IT.

What does Copilot really cost? The license is the predictable part. Consumption-based components for Cowork and external agents are added. We have broken down how token-based prices affect the total bill in What AI Really Costs.

We already use several AI tools. Where do we start? With an inventory and prioritization. Our article Too Many AI Tools, No Priority is relevant here.

Sources & References

1. Microsoft Learn, „Enterprise data protection in Microsoft Copilot and Microsoft Copilot Chat", As of 18.08.2026: learn.microsoft.com
2. Microsoft, Prices and Plans for Microsoft 365 Business with Copilot: microsoft.com
3. Microsoft Learn, „Assign licenses and manage access to Copilot Studio", As of 03.08.2026: learn.microsoft.com
4. Microsoft 365 Blog, „Copilot Cowork is now generally available", 16.06.2026: microsoft.com
5. Microsoft Learn, „Flexible Routing (EU and EFTA)", As of 20.08.2026: learn.microsoft.com
6. Microsoft Learn, „Microsoft 365 Copilot overview", As of 27.08.2026: learn.microsoft.com
7. Microsoft Learn, „Semantic index for Copilot", As of 18.08.2026: learn.microsoft.com
8. Microsoft Support, „Get started with Copilot in Excel", As of 25.08.2026: support.microsoft.com
9. Microsoft Support, „Keep your presentation on brand with Copilot", As of 18.08.2026: support.microsoft.com
10. heise, „Microsoft Copilot in PowerPoint Workflow", Practical Test of 16.06.2026 (Paywall): heise.de
11. Microsoft Learn, „Agents overview" (Comparison of Declarative and Custom Engine Agents), As of 05.08.2026: learn.microsoft.com