Microsoft Copilot

What it actually is?

Strip away the branding, and there are four separate products here. Copilot Chat is free, web-based, and doesn’t touch your organization’s internal data; it’s a general assistant, not a work tool. Microsoft 365 Premium ($19.99/month) is the consumer plan that replaced the standalone Copilot Pro subscription, which Microsoft officially retired (existing Pro subscribers lost support for it on August 1, 2026). Microsoft 365 Copilot ($30/user/month for enterprise, $18–21 for smaller businesses) is the actual work product: it’s connected to your Outlook, Teams, SharePoint, and OneDrive data through something Microsoft now calls Work IQ, and it’s always an add-on to an existing Microsoft 365 subscription, never sold alone. Copilot Studio is a fourth, separate platform for building and governing custom agents, billed by capacity or usage rather than per seat.

On top of the core assistant sit two newer reasoning agents, Researcher and Analyst, which behave less like chat and more like a task you delegate. Researcher runs OpenAI’s deep-research model against both your work data and the open web, while Analyst runs Python and shows its work for data-heavy questions. As of 2026, Copilot Studio agents can also use Anthropic’s Claude models, not just OpenAI’s, and a new “Agent 365” console gives IT a single place to see and govern every agent running across the organization, whoever built it.

Where it’s genuinely good?

The grounding is the real story. Ask Researcher to build a competitive analysis, and it can pull from your actual sales emails, meeting notes, and internal documents alongside public web results, something a standalone chatbot structurally cannot do without you manually feeding it that context every time. Analyst extends that into real data work, running Python against your numbers and showing its reasoning step by step rather than just handing you a conclusion. For an organization that already runs on Outlook, Teams, and SharePoint, that’s a genuinely different value proposition than a general-purpose assistant bolted on from outside.

Agent 365 is the other piece worth taking seriously if you’re past the pilot stage. As more teams build their own agents in Copilot Studio, the question of who has visibility into what those agents can access stops being theoretical. Agent 365 is Microsoft’s answer to that, and it’s a meaningfully more mature governance story than most competitors currently offer.

Where it falls short?

Two security episodes are worth knowing in detail, not just in passing. Windows Recall, the Copilot+ PC feature that continuously screenshots your activity for later natural-language search, was pulled from its original 2024 launch after security researchers called it a privacy disaster, relaunched as opt-in with encryption and biometric gating in 2025, and reached general availability in December 2025. That still wasn’t the end of it: independent researchers were finding fresh vulnerabilities as recently as April 2026, a full year after the rework, and reporting in early 2026 suggested Microsoft itself was reconsidering how hard to push Recall and Copilot together going forward. Separately, EchoLeak, a critical zero-click vulnerability disclosed in June 2025, allowed an attacker to exfiltrate sensitive Microsoft 365 Copilot data from a single crafted email with no user interaction. Microsoft patched it, and there’s no confirmed real-world exploitation, but it was a genuine first: the first widely reported zero-click attack against a mainstream enterprise AI assistant, and a preview of a threat category every RAG-based assistant now has to contend with.

The adoption numbers are the less dramatic but arguably more practically important issue. Multiple independent trackers converge on the same story: roughly 70% of the Fortune 500 hold Microsoft 365 Copilot licenses, but weekly active usage of those purchased seats sits at only 20–30%, and overall paid conversion across the Microsoft 365 install base is around 3%. Microsoft’s own commissioned Forrester study projects a 116–353% three-year ROI, which may well be accurate for organizations that roll this out deliberately, but it’s a vendor-commissioned figure, and it sits alongside independently tracked usage data suggesting that many purchased licenses aren’t being used. Add in a pricing structure spread across at least six tiers with prerequisites, expiring promotions, and new bundles introduced mid-year, and the honest picture is a powerful tool that a meaningful share of buyers aren’t yet getting full value from.

Which plan to actually get?

Start with the free Copilot Chat tier included in most Microsoft 365 subscriptions to get a feel for the interface; just know it can’t see your organization’s internal data, so it won’t show you what the paid tier is actually for. For individuals, Microsoft 365 Premium at $19.99/month is the only consumer path now that Copilot Pro is retired. For a business under 300 seats, Copilot Business (around $18–21/user, plus a required base license) is the more defensible entry point than jumping straight to Enterprise. Only move to the $30/seat Enterprise tier once you have a specific, measured use case and a rollout plan; the usage data above strongly suggests that licensing without a deliberate adoption push is where the value gets lost. Treat the $99/seat E7 Frontier Suite as a bet on agentic workflows that are still very new (computer-using agents only became generally available in May 2026, so there isn’t much track record yet to justify the 74% premium over standard E5 unless you have a concrete need for the Agent 365 control plane specifically).

Ease of use

The free consumer chat is as simple as any other assistant: type, get an answer, done. The complexity shows up once you’re inside the Microsoft 365 version: knowing which surface to use for which task, understanding what Work IQ actually grounds an answer in, and keeping up with rebranding that’s happened more than once in the past year (Work IQ itself is a relatively new label for what used to be described differently) all add real overhead. For an IT team standing this up across an organization, that overhead is a genuine project, not a toggle.

Who it’s actually for?

Organizations already deeply embedded in Microsoft 365, with Outlook, Teams, and SharePoint as the actual daily work surfaces, who are willing to invest in a real rollout rather than a license purchase. It’s a weaker fit if your team’s tools live outside that ecosystem (Slack, Notion, Google Workspace, Salesforce), since Copilot’s grounding is built specifically around Microsoft Graph and reaching outside it requires custom connectors. And given the adoption data above, it’s worth being honest with yourself before buying at scale: this is a tool where the gap between “licensed” and “actually used daily” has been large enough, often enough, that it deserves a real pilot and a measurement plan before a company-wide rollout, not after.