Quick safety summary
Microsoft Copilot at a glance
80/100
tween
Ages 18+ on consumer Copilot; 13+ when provisioned via a Microsoft 365 Education (Entra ID) tenant with admin controls
Within intended range
High
Score 84/100
82/100
Strong filters
Best use cases
- General-Purpose AI Assistant (LLM chatbot with web + Office integration) workflows
- Classroom assignments
Main risks
- No elevated risks identified.
Recommended for
Not ideal for
Product overview
How Microsoft Copilot works
Microsoft Copilot is a general-purpose AI assistant built on OpenAI models and integrated across Bing, Windows, Edge, and Microsoft 365. The consumer version is 18+ and comparable to ChatGPT for K-12 risk. The school-facing version — Copilot Chat / Microsoft 365 Copilot Chat provisioned through a Microsoft 365 Education (Entra ID) tenant — extends enterprise data protection, keeps prompts and responses out of foundation-model training, and is offered under Microsoft's OST / DPA with FERPA and student-data commitments. Teen Approved when deployed through the Edu tenant with admin controls; not appropriate for direct student use on the consumer product.
Student usage
Only via Microsoft 365 Copilot Chat provisioned through an Edu tenant; consumer Copilot is 18+
Modality
Text, image input/output, voice, code; document/file grounding in M365 Copilot
Underlying model
Frontier LLMs (primarily OpenAI GPT family) with Microsoft safety layer and grounding
Common use cases
- Teacher lesson planning and rubric drafting
- Student research with citation practice (grades 6-12)
- Administrative writing and summarization
- Accessibility support (rewrite, summarize, translate)
- Code learning in Edge/VS Code for CS classes
Free full report — 0 of 3 used
You can open 3 complete evaluations on the free plan. Already-opened reports stay unlocked. Upgrade to School Pro for unlimited full reports and the K-12 governance workspace.
Risk intelligence
Risk level breakdown
Risk dimensions derived directly from the SafeGradeAI rubric scores (higher score = higher risk). Additional dimensions appear when entered by an evaluator.
Scores derived from the SafeGradeAI rubric. Methodology: read more.
Safety framework
Framework analysis
Five evaluation categories from the SafeGradeAI rubric. Each shows the rubric score, evaluator confidence, and (where documented) analysis, strengths, and concerns.
Strengths & concerns
Detailed pros & concerns
Strengths
- Microsoft 365 Copilot Chat via Edu tenant offers enterprise data protection: prompts/responses not used to train foundation models.
- Signed DPA with FERPA, COPPA, and GDPR commitments plus EU Data Boundary options.
- Strong admin controls: SafeSearch enforcement, DLP, Purview audit logs, tenant-wide content filters.
- Responsible AI Standard, published transparency notes, and EU AI Act GPAI documentation.
- Tight integration with existing school Microsoft 365 stack means fewer new data vendors to vet.
Concerns
- Consumer Copilot (copilot.microsoft.com) is 18+ and lacks enterprise protections — easy for students to reach outside school controls.
- Web-grounded answers can surface age-inappropriate content when not filtered by tenant policy.
- No student-facing safeguards like simplified reading level, time limits, or academic-integrity nudges.
- Rapidly evolving surface area (Windows Copilot, Copilot Studio agents, Copilot Pages) means default settings can drift ahead of district policy.
- Feature parity between Edu and Enterprise SKUs can be confusing; districts sometimes deploy the wrong SKU.
Guidance at a glance
Recommendations for parents, teachers, and administrators
Parent guidance
Do not let children use consumer Copilot (copilot.microsoft.com) on your account — it is 18+ and has no parental controls. If your child uses Copilot at school, it is likely provisioned through a Microsoft 365 Education account with additional protections; ask the school which Copilot experience is enabled. Use Microsoft Family Safety to restrict Edge/Bing at home, and treat Copilot outputs as drafts to check together, not answer keys.
Classroom-use recommendation
For classroom use, only assign Copilot when your district has enabled Microsoft 365 Copilot Chat through the Edu tenant with enterprise data protection — never route students to the consumer Copilot site. Frame it as a thinking partner: require students to cite sources, disclose AI assistance, and revise outputs in their own words. Do not paste student PII (names, IEP details, grades) into prompts. Have a fallback assignment for students without a school Copilot license.
School policy recommendation
Policy recommendation for K-12 administrators: block the consumer Copilot domain on managed networks; permit Microsoft 365 Copilot Chat only through the district Entra ID Edu tenant with (1) enterprise data protection enabled, (2) DPA/OST amendments signed for FERPA and applicable state student-privacy laws, (3) tenant-wide SafeSearch and content filters enforced, (4) Purview audit logging on for AI interactions, and (5) an AUP requiring citation of AI use and prohibiting student PII in prompts. Reassess controls whenever Microsoft ships new Copilot surfaces (Copilot in Windows, Copilot Studio agents), since default behavior may not match district policy until admin templates are applied.
Trust & credibility
Evaluation integrity
Last reviewed
July 15, 2026
Report version
v1
Evaluator confidence
80/100
Monitoring
Active continuous monitoring
Methodology
Scored against the SafeGradeAI rubric covering privacy, moderation, generative safeguards, age-appropriate design, and transparency.
Read full methodology →Change log
- July 15, 2026Evaluation published.
Re-tested at least every 6 months and after any major release.
What changed since the previous evaluation
Reviewed July 15, 2026 · Confidence: high
- 2023-02: Microsoft launches Bing Chat (later Copilot) using OpenAI models
- 2023-11: Microsoft 365 Copilot generally available for enterprise
- 2024-04: Copilot for Education launched with enterprise data protection
- 2024-09: Copilot Pages and BizChat announced
- 2025-05: Copilot rebranded and integrated into Microsoft 365 apps for education tenants
- 2025-11: Consumer Copilot age-gated to 18+ in several regions
- 2026: Education-tenant admin controls expanded for per-OU AI feature enablement
Sources & citations
Every major claim in this evaluation is backed by at least one credible public source. Last reviewed July 15, 2026.
- 1Microsoft Copilot Terms and PrivacyMicrosoft · microsoft.com
- 2Microsoft Privacy StatementMicrosoft · privacy.microsoft.com
- 3Microsoft Trust Center — CopilotMicrosoft · microsoft.com
- 4Microsoft 365 Copilot Data ProtectionMicrosoft · learn.microsoft.com
- 5Microsoft Responsible AI StandardMicrosoft · microsoft.com
- 6Copilot for EducationMicrosoft · microsoft.com
Methodology
How this score was produced
Scored against the SafeGradeAI framework v2.5 across five dimensions — privacy, moderation, GenAI safeguards, age-appropriate design, and transparency — with COPPA, FERPA, and GDPR-K lenses. Independent. No vendor pay-for-rating.
Independent evaluation. SafeGradeAI does not accept payment from vendors for ratings.
Official website
Visit Microsoft Copilot directly
For the most current product capabilities, pricing, and policies, visit the official Microsoft Corporation website.
copilot.microsoft.com