Microsoft 365 Copilot: what you get, what it costs and why your tenant must be ready

What Copilot actually does

Microsoft 365 Copilot is an AI assistant built into the apps you already use. In practice, these are the scenarios that matter most in a small business:

• Outlook: a summary of a long email thread and a suggested reply in your tone.
• Teams: a meeting recap with decisions and action items, including for people who missed it.
• Word: a first draft of a proposal, contract or procedure based on your existing documents.
• Excel: analyzing a spreadsheet in plain language, without writing formulas.
• Chat: questions like "what did we agree with client X last month", where Copilot searches your emails, documents and meetings.

The key difference from free AI tools: Copilot works on your data inside your tenant, respects existing permissions and does not train public models on your documents.

What Copilot does not do

Let's kill the myth early: Copilot is not an employee. It does not know what is true, it knows what your documents say. If your procedures are outdated, your proposals inconsistent and your files scattered, Copilot will confidently serve you exactly that chaos. Output quality follows the quality of the data it works on.

What it costs and what you need first

Copilot for Microsoft 365 is an add-on to your existing licenses: roughly 30 dollars per user per month, with an annual commitment. It requires a business plan underneath (Business Standard, Business Premium or an enterprise equivalent). For a 10-person company that effectively doubles the monthly Microsoft 365 bill, so buying licenses for everyone at once is the wrong move. There is also the free Copilot Chat, useful for general questions, but it has no access to your tenant data, and that is where the real value lives.

The main risk: Copilot sees everything the user sees

This is the part the ads skip. Copilot respects permissions, but most small companies never cleaned up their permissions. Folders shared years ago, "everyone has access to everything because it's faster", forgotten sharing links. Without Copilot, that mess stays invisible because nobody browses other people's folders. With Copilot, someone asks "what are the bonuses in this company" and, if the salary file sits in the wrong place, they get an answer. Copilot broke nothing: it simply surfaced what had been accessible all along.

Preparing the tenant before the first license

That is why we run tenant preparation before the first Copilot license:

• Sharing inventory: who can access what in SharePoint and OneDrive, especially "Anyone" links.
• Locking down sensitive content: salaries, contracts, HR and finance in separate spaces with clear membership.
• Sensitivity labels for documents Copilot must not pull into answers.
• Basic hygiene: MFA for everyone, guests and external sharing under control, ex-employee accounts removed.
• A short training: what to ask, what not to paste in and how to verify what Copilot returns.

None of this is wasted work even if you postpone Copilot: the same preparation is the foundation of a secure tenant in general.

The sensible path: pilot first

Our recommendation to clients is always the same. Start with two to five licenses for the people who live in email, meetings and documents: the owner, sales, the office manager. Give the pilot four to six weeks and measure concrete use cases, not impressions. If the team consistently saves hours on meetings and proposals, expand. If not, you cancel a few licenses and keep a cleaned-up tenant.

Where we come in

For clients on a managed contract we run the whole cycle: tenant readiness assessment, permissions and sharing cleanup, licensing through CSP, a measured pilot and team training. If you are considering Copilot, the first step is not a license but a look inside your tenant. That is a few days of work, and it answers "are we ready" before you spend the first euro.