A diverse group of professionals sitting on a couch with a laptop.

Table of Contents

Beyond the 70%: Market Signals About Microsoft 365 Copilot Adoption

Introduction

Go online, and you find blogs, articles, webinars, and podcasts about generative AI (GenAI) everywhere. The subject feels ubiquitous, but how ubiquitous is the official adoption of this innovative technology? We wanted to provide benchmarks to reassure you that you aren’t behind the curve. Since most large organizations use the Microsoft M365 suite, and Copilot is the GenAI tool built into that platform, we investigated Copilot adoption.  

Our investigations found that a large percentage of organizations are testing Copilot with a group of cross-functional employees, while few have reached enterprise-wide adoption. Many groups have found that a lack of sufficient internal data governance controls places their sensitive information at risk. The need to close this gap is elevating information governance to a business-critical function. Let’s look at what the market has to say about Copilot adoption.

Download this report as a PDF

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Methodology and Sources

This piece synthesizes publicly available information from 2024 and 2025. We reviewed Microsoft investor call transcripts, first-party blogs, analyst research and press coverage, and named-party case studies. Where we reference proprietary research that we did not access directly (e.g., Gartner), we rely on reputable secondary summaries.

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Adoption

In its FY25 Q1 investor call, Microsoft stated that 70% of the Fortune 500 companies have adopted Copilot. But they did not specify the level of adoption. In fact, in the FY25 Q4 call, they stated that they are in a “seat-add and expansion” phase and optimistically told investors that “customers [are] returning to buy more seats.” These statements are a clear indication that companies are still staging their deployments.  

A recent Gartner report, “How to Secure and Govern Microsoft 365 Copilot at Scale” (Gartner, Max Goss, Avivah Litan, Dan Wilson, January 2025), highlights a growing challenge in enterprise AI adoption: Security and governance concerns are slowing Microsoft 365 Copilot adoption. In fact, 47% of IT leaders report they are either not very confident or have no confidence at all in their ability to manage Copilot’s security and access risks.  

Lighthouse’s information governance experts are seeing the same phenomenon in their client interactions.  

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Adoption

In its FY25 Q1 investor call, Microsoft stated that 70% of the Fortune 500 companies have adopted Copilot. But they did not specify the level of adoption. In fact, in the FY25 Q4 call, they stated that they are in a “seat-add and expansion” phase and optimistically told investors that “customers [are] returning to buy more seats.” These statements are a clear indication that companies are still staging their deployments.  

A recent Gartner report, “How to Secure and Govern Microsoft 365 Copilot at Scale” (Gartner, Max Goss, Avivah Litan, Dan Wilson, January 2025), highlights a growing challenge in enterprise AI adoption: Security and governance concerns are slowing Microsoft 365 Copilot adoption. In fact, 47% of IT leaders report they are either not very confident or have no confidence at all in their ability to manage Copilot’s security and access risks.  

Lighthouse’s information governance experts are seeing the same phenomenon in their client interactions.  

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Adoption

In its FY25 Q1 investor call, Microsoft stated that 70% of the Fortune 500 companies have adopted Copilot. But they did not specify the level of adoption. In fact, in the FY25 Q4 call, they stated that they are in a “seat-add and expansion” phase and optimistically told investors that “customers [are] returning to buy more seats.” These statements are a clear indication that companies are still staging their deployments.  

A recent Gartner report, “How to Secure and Govern Microsoft 365 Copilot at Scale” (Gartner, Max Goss, Avivah Litan, Dan Wilson, January 2025), highlights a growing challenge in enterprise AI adoption: Security and governance concerns are slowing Microsoft 365 Copilot adoption. In fact, 47% of IT leaders report they are either not very confident or have no confidence at all in their ability to manage Copilot’s security and access risks.  

Lighthouse’s information governance experts are seeing the same phenomenon in their client interactions.  

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Adoption

In its FY25 Q1 investor call, Microsoft stated that 70% of the Fortune 500 companies have adopted Copilot. But they did not specify the level of adoption. In fact, in the FY25 Q4 call, they stated that they are in a “seat-add and expansion” phase and optimistically told investors that “customers [are] returning to buy more seats.” These statements are a clear indication that companies are still staging their deployments.  

A recent Gartner report, “How to Secure and Govern Microsoft 365 Copilot at Scale” (Gartner, Max Goss, Avivah Litan, Dan Wilson, January 2025), highlights a growing challenge in enterprise AI adoption: Security and governance concerns are slowing Microsoft 365 Copilot adoption. In fact, 47% of IT leaders report they are either not very confident or have no confidence at all in their ability to manage Copilot’s security and access risks.  

Lighthouse’s information governance experts are seeing the same phenomenon in their client interactions.  

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Adoption

In its FY25 Q1 investor call, Microsoft stated that 70% of the Fortune 500 companies have adopted Copilot. But they did not specify the level of adoption. In fact, in the FY25 Q4 call, they stated that they are in a “seat-add and expansion” phase and optimistically told investors that “customers [are] returning to buy more seats.” These statements are a clear indication that companies are still staging their deployments.  

A recent Gartner report, “How to Secure and Govern Microsoft 365 Copilot at Scale” (Gartner, Max Goss, Avivah Litan, Dan Wilson, January 2025), highlights a growing challenge in enterprise AI adoption: Security and governance concerns are slowing Microsoft 365 Copilot adoption. In fact, 47% of IT leaders report they are either not very confident or have no confidence at all in their ability to manage Copilot’s security and access risks.  

Lighthouse’s information governance experts are seeing the same phenomenon in their client interactions.  

Companies are undertaking data remediation/governance exercises (to become more GDPR-compliant etc.) as a precursor to Copilot adoption.

— David Campbell, Sr. Partner Account Manager, EMEA, Lighthouse

Adoption

In its FY25 Q1 investor call, Microsoft stated that 70% of the Fortune 500 companies have adopted Copilot. But they did not specify the level of adoption. In fact, in the FY25 Q4 call, they stated that they are in a “seat-add and expansion” phase and optimistically told investors that “customers [are] returning to buy more seats.” These statements are a clear indication that companies are still staging their deployments.  

A recent Gartner report, “How to Secure and Govern Microsoft 365 Copilot at Scale” (Gartner, Max Goss, Avivah Litan, Dan Wilson, January 2025), highlights a growing challenge in enterprise AI adoption: Security and governance concerns are slowing Microsoft 365 Copilot adoption. In fact, 47% of IT leaders report they are either not very confident or have no confidence at all in their ability to manage Copilot’s security and access risks.  

Lighthouse’s information governance experts are seeing the same phenomenon in their client interactions.  

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Department Specific Adoption

In its Microsoft 365 Copilot Adoption Playbook, Microsoft recommends launching with a limited pilot group first, gathering feedback, assessing value, and optimizing configurations before a wider rollout. While many organizations identify and turn to cross-departmental teams as testers, others have selected departments.

Legal

In a CLOC 2025 survey, 30% of corporate legal team respondents stated that they have adopted GenAI tools for some tasks, which is nearly double the adoption rate from 2023. While the survey didn’t ask about Copilot use specifically, we can safely extrapolate these numbers for the legal departments within Microsoft-centric enterprises to come up with Copilot adoption.  

Even when they are not the first group to adopt Copilot, legal departments are integrally involved with initiatives, balancing productivity improvements with ethical, privacy, and compliance considerations.

Finance  

Microsoft has identified the finance department as a good target for Copilot programs, as demonstrated by the fact that they have delivered the most prescriptive content and product depth for them. These tools tend to shorten time-to-value for first deployments.

Industry Adoption

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Financial Services

A recent global banking study2 found that banking leads GenAI integrations. This is supported by Microsoft’s reporting: Sharing wins with investors, it noted that financial institutions lead the way with the largest deployments. Barclays rolled out M365 Copilot to 100,000 employees, and UBS completed a 50,000-license deployment in 2025. Most FinServ organizations are following the typical staged adoption process, and rather than beginning with Finance or HR, they are piloting GenAI in Marketing (47%), IT (39%), and Sales (36%) Departments.

Life Sciences

Copilot adoption by life sciences (biotech and pharma) companies outpaces the market as a whole with a 58% adoption rate. Of those companies, 34% are using it to help their research efforts.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Financial Services

A recent global banking study2 found that banking leads GenAI integrations. This is supported by Microsoft’s reporting: Sharing wins with investors, it noted that financial institutions lead the way with the largest deployments. Barclays rolled out M365 Copilot to 100,000 employees, and UBS completed a 50,000-license deployment in 2025. Most FinServ organizations are following the typical staged adoption process, and rather than beginning with Finance or HR, they are piloting GenAI in Marketing (47%), IT (39%), and Sales (36%) Departments.

Life Sciences

Copilot adoption by life sciences (biotech and pharma) companies outpaces the market as a whole with a 58% adoption rate. Of those companies, 34% are using it to help their research efforts.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Financial Services

A recent global banking study2 found that banking leads GenAI integrations. This is supported by Microsoft’s reporting: Sharing wins with investors, it noted that financial institutions lead the way with the largest deployments. Barclays rolled out M365 Copilot to 100,000 employees, and UBS completed a 50,000-license deployment in 2025. Most FinServ organizations are following the typical staged adoption process, and rather than beginning with Finance or HR, they are piloting GenAI in Marketing (47%), IT (39%), and Sales (36%) Departments.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Financial Services

A recent global banking study2 found that banking leads GenAI integrations. This is supported by Microsoft’s reporting: Sharing wins with investors, it noted that financial institutions lead the way with the largest deployments. Barclays rolled out M365 Copilot to 100,000 employees, and UBS completed a 50,000-license deployment in 2025. Most FinServ organizations are following the typical staged adoption process, and rather than beginning with Finance or HR, they are piloting GenAI in Marketing (47%), IT (39%), and Sales (36%) Departments.

Life Sciences

Copilot adoption by life sciences (biotech and pharma) companies outpaces the market as a whole with a 58% adoption rate. Of those companies, 34% are using it to help their research efforts.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Financial Services

A recent global banking study2 found that banking leads GenAI integrations. This is supported by Microsoft’s reporting: Sharing wins with investors, it noted that financial institutions lead the way with the largest deployments. Barclays rolled out M365 Copilot to 100,000 employees, and UBS completed a 50,000-license deployment in 2025. Most FinServ organizations are following the typical staged adoption process, and rather than beginning with Finance or HR, they are piloting GenAI in Marketing (47%), IT (39%), and Sales (36%) Departments.

Life Sciences

Copilot adoption by life sciences (biotech and pharma) companies outpaces the market as a whole with a 58% adoption rate. Of those companies, 34% are using it to help their research efforts.

Technology Companies

As you might expect, adoption of GenAI tools by technology companies is high. An SAS press release1 supports this assumption; it found that 70% of tech companies (telecom specifically) have already adopted GenAI tools. Since a 2024 report identified Microsoft 365 as the number one app in Fortune 500 companies, we can assume that Copilot is the GenAI tool of choice.

Financial Services

A recent global banking study2 found that banking leads GenAI integrations. This is supported by Microsoft’s reporting: Sharing wins with investors, it noted that financial institutions lead the way with the largest deployments. Barclays rolled out M365 Copilot to 100,000 employees, and UBS completed a 50,000-license deployment in 2025. Most FinServ organizations are following the typical staged adoption process, and rather than beginning with Finance or HR, they are piloting GenAI in Marketing (47%), IT (39%), and Sales (36%) Departments.

Life Sciences

Copilot adoption by life sciences (biotech and pharma) companies outpaces the market as a whole with a 58% adoption rate. Of those companies, 34% are using it to help their research efforts.

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse
A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Data Governance, Privacy, and Security Concerns

Data security preparedness has been identified as the most significant roadblock to enterprise Copilot adoption. This is a valid concern. One author referred to Copilot as the “world’s greatest bloodhound.”3 M365 Copilot can draw on any content the user can access across SharePoint, Teams, OneDrive, and email, and can base its answers on that information. This all-access capability spotlights lax data governance practices. A 2023 data risk report4 found that 15% of enterprises’ business-critical data is at risk. This issue must be addressed prior to roll-out. In its Copilot implementation documentation, Microsoft emphasizes the importance of ensuring “just enough access” for Copilot users.  

Highly regulated regions, like the EU/UK have raised concerns about Copilot as it relates to data protection laws. One prominent example is the Data Protection Impact Assessment commissioned by the Dutch government. The report identified four areas of concern: The retention time for user behavior and system usage data, whether DSAR results contain all data required under GDPR, the lack of transparency regarding personal data included in required service data and diagnostic data, and the potential for Copilot to create inaccurate personal data via hallucinations. To its credit, Microsoft has begun to address these concerns.  

Data security professionals are also concerned about external risks. A M365 Copilot vulnerability called EchoLeak was identified in early 2025. The zero-click attack could secretly and automatically capture and exfiltrate valuable company information or other sensitive information from a user’s email. Microsoft developed a server-side patch, but these types of threats add credence to security concerns.

eDiscovery Concerns

U.S. Courts are beginning to treat Copilot content, prompts, responses, and, in the case of Andersen v Stability AI / Midjourney (N.D. Cal., 2025), training data, as a new class of ESI subject to preservation and production when relevant and proportional. This potential inclusion in discovery data sets can slow adoption as legal departments create data retention frameworks for this new data type.

Lighthouse’s Jason Covey addresses this issue regularly:

Copilot conversations with eDiscovery teams have been limited almost exclusively to how to address compliance considerations with Copilot data artifacts.
— Jason Covey, Senior Consultant, Information Governance, Lighthouse

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

Accelerators

Microsoft has taken steps to mitigate these risks with built-in governance functions. To curb oversharing, SharePoint Advanced Management is now included with M365 Copilot, and Restricted SharePoint Search can be used to scope which sites are accessible by Copilot. It has answered the eDiscovery retention issue with dedicated Copilot prompts and responses. These governance tools are likely to drive quicker adoption. But the true accelerator is likely to be Microsoft’s enormous install base. With over 430 million M365 commercial seats as of FY25 Q3, Copilot is the clear choice as enterprises adopt GenAI.  

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

ROI

Microsoft’s claims about Copilot’s ability to boost productivity and work quality have been the adoption incentive for many organizations. Forrester noted in its blog that leaders are “seeking a clear payout” and want the true ROI in the form of a “hard-nosed business case.” However, some enterprise leaders are finding that a measurable return on investment is elusive. Effective implementation can be a heavy lift for users and IT staff. User enablement, including prompt design training and implementing new workflows, cuts into already busy work schedules. And prior to releasing the tool, the IT team can spend weeks preparing the data, configuring permissions and security controls, and building governance frameworks.

There are documented instances of measurable ROI in the public and private sectors. In a 12-week UK government trial including approximately 20,000 users, participants self-reported that they saved an average of 26 minutes per day by using Copilot.

Microsoft’s legal department measured 32% faster task completion with >20% accuracy. These types of results can create a fear of missing out. This fear of falling behind the AI train has driven some organizations to jettison the business case and proceed with only a promise of future benefits.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Conclusion

The market signals are clear: Copilot adoption is broad across the market but limited within individual enterprises. This makes sense, given that Microsoft recommends a pilot-first adoption framework. Security, privacy, and eDiscovery risks can slow timelines without preexisting data privacy and regulatory frameworks. But Microsoft is making strides in its efforts to mitigate these risks by adding problem-specific functionality within the M365 platform. Beginning October 2025, Microsoft will bundle the Sales, Service, and Finance Copilots into the core Microsoft 365 Copilot at no additional cost, removing a price barrier to adoption. Beyond Microsoft’s claim of a 70% adoption rate with the Fortune 500, the real story is cautious expansion that follows a proven path: operationalize governance, measure outcomes, and grow from pilots to programs.

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

A female lawyer looking out the window, holding a tablet.
A man and a woman looking at a tablet in an office building.

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Resources

1 SAS, Telcom Leads the charge in Generative AI use and investment. https://www.sas.com/en_gb/news/press-releases/2024/october/telco-leads-the-charge-in-generative-ai.html

2 SAS, Your journey to a GenAI future: A strategic path to success in banking. https://www.sas.com/en/whitepapers/your-journey-to-the-genai-future-114042.html

3 Schnackenburg, Paul, Microsoft 365 Copilot Data Governance. https://virtualizationreview.com/articles/2024/12/17/microsoft-365-copilot-data-governance.aspx

4 Concentric, Data Risk Report 2H 2023. https://concentric.ai/wp-content/uploads/2024/10/DATA-RISK-REPORT_H2-2023-1.pdf

Get in touch to learn how Lighthouse can guide your Copilot adoption.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

ebook