Security Risks Acknowledgement for Copilot for Microsoft 365

While Microsoft Copilot for Microsoft 365 offers powerful productivity assistance, users must exercise caution in its application. Copilot’s suggestions should be thoroughly vetted and understood by the user to ensure accuracy, security, and compliance with legal and ethical standards. Neither Microsoft nor Visory guarantee the correctness or suitability of Copilot-generated content for any specific purpose, and users are solely responsible for any consequences arising from its use.  Further, as Copilot mines company data, considerations should be given to what data users and departments have access to through Copilot.  Visory recommends that Customer proceed with caution and diligence and use Copilot responsibly to safeguard against potential errors, vulnerabilities, or misuse.

Security Risks of Copilot for Microsoft 365

Copilot is a tool that helps users write documents, emails, presentations, and other types of texts and images by generating suggestions based on natural language processing and artificial intelligence. It integrates with Microsoft 365 applications such as Word, Outlook, PowerPoint, and Excel. Copilot for Microsoft 365 can also be extended into local network storage and other line of business applications by leveraging available APIs and plugins.  However, using Copilot for Microsoft 365 may also pose some risks that users should be aware of and take precautions to avoid or mitigate.

• Copilot may use data from the user’s Microsoft 365 account, such as documents, emails, contacts, calendars, and other information, to generate suggestions. This means that Copilot may have unintended access to sensitive or confidential data that the organization may not want to share with the Copilot user.
• Copilot may also use data from other sources, such as the internet, public databases, or other users’ inputs, to generate suggestions. This means that Copilot may introduce data that is inaccurate, irrelevant, outdated, or inappropriate for the user’s context or purpose.

No Guarantees; No Representations or Warranties; Indemnification by Customer.

Visory makes no guarantees or promises about how Copilot operates or that it will function as intended. Copilot is not error-free, may not work as expected, and may generate incorrect information. Customer should not rely on Copilot and should not use Copilot for advice of any kind. Customer agrees that its use of Copilot is solely at Customer’s own risk.  Without limiting the Visory Master Services Agreement in any way, but for the sake of clarity, Visory does not make any warranty or representation of any kind that any material created by Copilot does not infringe the rights of any third party in any subsequent use of the content Customer may use (including but not limited to copyright, trademark, rights of privacy and publicity, and defamation).  In addition, Customer agrees to indemnify and hold harmless Visory, its affiliates, employees, and any other agents from and against any claims, losses, and expenses (including attorneys’ fees) arising from or relating to Customer’s use (or use by any employees or agent of Customer’s) of Copilot, including the subsequent use of any content from Copilot and Customer’s breach of the Visory Master Services Agreement or any other document referenced in Customer’s Service Order, or violation of any applicable law.