The features in this guide require the Microsoft 365 Copilot paid add-on. They are not available on standard M365 plans (E3/E5) or free Copilot Chat (except Copilot Chat within Outlook, which retains inbox and calendar grounding for all users). Verify your licence under Settings → Subscriptions or contact your Microsoft admin or check your organisation's licence portal.
| Data source | Free (E3/E5 included) | M365 Copilot paid add-on |
|---|---|---|
| Outlook email (received) | Copilot Chat in Outlook only · inbox grounding · standalone Chat has no access | Up to 10 results per query · recency-weighted |
| Outlook calendar | Copilot Chat in Outlook only · calendar grounding · standalone Chat has no access | Yes — meetings, invites, attendees |
| Teams chat messages | No access | Last 30 days · current thread only (in Teams app) |
| Teams channels | No access | Channels you are a member of only |
| OneDrive files | No access unless you upload the file manually | Yes — files you have access to · @mention to reference explicitly |
| SharePoint documents | No access | Yes — sites and files your permissions allow |
| Meeting transcripts (Teams) | No access | Yes — meetings you attended where transcription was enabled |
| Web (Bing search) | Yes — primary data source | Yes — Web/Work toggle controls which is queried |
| Files uploaded to chat | Yes | Yes |
| Copilot Notebooks | No access | Yes — grounded in references you pinned |
| SAP · Primavera · external systems | No access | No access without a custom connector. Federated connectors for third-party apps (Canva, HubSpot, Notion, Linear) in Public Preview as of February 2026. |
How to confirm which tier you have: open Copilot Chat. If you see a Web / Work toggle in the interface, you have the paid add-on. If you see web results only with no toggle, you are on the free tier.
Copilot queries Microsoft Graph using your identity. It can only retrieve content you already have permission to access. No new access is created. If you cannot open a SharePoint file, Copilot cannot see it either.
The semantic index that powers Copilot retrieval enforces your access controls at query time, not at index time. Content is filtered before it reaches the model — the model never "sees" data it could not surface to you.
Emails and files encrypted with Purview sensitivity labels are subject to usage rights. If your rights do not include content extraction, Copilot will not surface that content even if you can open the file.
Copilot surfaces everything your permissions allow — including files shared too broadly. If a SharePoint site grants view access to everyone in the organisation, Copilot can retrieve its content for any user. This is a governance issue, not a Copilot issue.