Microsoft Copilot | License comparison

Do you feel the same way? You open Microsoft Edge or Word, and it says “Copilot” everywhere. But not all co-pilots are the same. Microsoft has combined completely different products under the same brand name, which differ drastically in function, privacy and price.

For IT admins and decision-makers, this confusion is dangerous. Anyone who uses the free private Copilot in the company risks data leaks. If you buy licenses for everyone, even though the free business version would have been enough, you are burning your budget. And anyone who confuses Copilot Studio with the “normal” Copilot will fail to implement it.

In this article, we clean up. We analyze the four most important variants:

• Copilot Free (Private): For home use.
• Copilot with Enterprise Data Protection (Free Business): The standard for companies.
• Copilot for Microsoft 365 (Paid): The fully integrated assistant.
• Copilot Studio: The construction kit for your own bots.

The goal is that in the end you know exactly which license your users really need.

Compare | Copilot Licenses

So that you can see at a glance where the differences lie, we have compared the variants.

The most important points for admins:

1. The “data protection trap”: The private co-pilot has no place in the company. Make sure that employees log in to the Edge browser with their company ID to be automatically upgraded to the “Commercial” variant (column 2). This costs nothing, but protects your data.
   
2. The “added value lever”: The expensive M365 license is particularly worthwhile when access to internal data (graph grounding) is required. If you only want to rewrite texts or research on the web, the free commercial version is sufficient.
   
3. Build it yourself: Copilot Studio (column 4) is not an assistant to help you, but a workbench that you use to build assistants for others (e.g., an IT support bot).

Models & Limits in Copilot

Copilot Free (Private)

This is the version you probably got to know first. It is aimed at consumers and is designed to help in everyday life – whether it’s planning a trip, writing poetry or generating images.

• Access & Target Group: Anyone with a personal Microsoft account (for example @outlook.com, , @hotmail.com or @live.com) has access to it.
• Features: Technically, this version is impressively strong. You get free access to current AI models such as GPT-4o and the DALL-E 3 image generator. Web search (Bing) is also integrated, so that Copilot can provide up-to-date information from the Internet.
• Availability: You can find it at copilot.microsoft.com, in the sidebar of the Edge browser, in the Windows taskbar, and as a smartphone app.

⚠️ The data protection hook (Important for admins!): This version is taboo for companies. Why? In the private version, Microsoft reserves the right to store the inputs (prompts) and the answers and potentially use them to train future AI models. This means that if an employee copies a confidential strategy email here to have it “better formulated”, this information theoretically ends up in Microsoft’s training dataset. There is no enterprise data protection here.

What is “Copilot Pro”? | You may have come across the “Copilot Pro” license in advertising or privately.

We have deliberately excluded this version from this guide. Why? Copilot Pro is aimed exclusively at private individuals (single users & families). Although it offers access to Copilot in private Office apps (Word, Excel), it lacks the crucial feature for companies: Enterprise Data Protection.

Copilot Free (Business)

The “Hidden Gem” for companies

Many companies don’t even know that they already own this version. It is the ideal entry into the AI world without spending money on expensive add-on licenses. Microsoft now officially calls this “Copilot with Enterprise Data Protection” (formerly Commercial Data Protection).

• Prerequisite: The user must log in with their Work ID (Entra ID / Azure AD account). This works with almost all Microsoft 365 Business and Enterprise plans (starting with Business Basic or F plans).
• The key difference: As soon as the login with the company account takes place, the mode changes.
  1. Data protection: Your data doesn’t leak. Microsoft doesn’t store prompts, doesn’t perform eye checks, and never uses your input for AI training.
  2. Data isolation: What happens in the meeting stays in the meeting. After closing the browser, the chat data will be discarded.
• Features: It can do exactly the same as the private version (write texts, summarize, generate images, web research), but does so in a legally compliant container.
• The limitation: He is “blind” to your internal company secrets. This Copilot doesn’t have access to your email, OneDrive files, or Teams chats (no Microsoft Graph access). It’s basically a secure, smart ChatGPT with internet access, but it doesn’t know anything about your company.

Microsoft 365 Copilot (license)

This is the product that everyone is talking about. It is a paid add-on that must be purchased in addition to a basic license (such as Microsoft 365 Business Standard/Premium or E3/E5).

The high price is justified by two crucial factors that the free versions lack:

• Deep integration with your apps: You no longer have to switch back and forth between browser and application. Copilot lives directly in Word (designing documents), Excel (analyzing data), PowerPoint (creating presentations from Word Docs), Outlook (summarizing emails), and Teams (writing meeting minutes in real time).
• Graph Grounding (the “killer feature”): This is the technical term for “context”. While the free versions only know the internet, this copilot knows your work environment. They have access to the Microsoft Graph — your emails, calendars, chats, and files.
  • Example: You can ask, “What is the current state of Project Alpha based on last week’s emails?”
  • Security: It only sees what the user is allowed to see (based on the existing permissions). He doesn’t learn from your data for others.

Business Chat (M365 Chat): In addition to the apps, there’s a one-stop shop (in Teams or on the web) that acts like a “super assistant” and links data sources (e.g., “Create a to-do list from this morning’s meeting and the Excel file from the budget”).

Copilot Studio

Here we change the perspective: Copilot Studio is not intended to use AI, but to build AI. It is the successor to “Power Virtual Agents” and is aimed at developers, power users and admins.

The purpose is to create custom copilots (your own bots) that do exactly what you want.

• Use-Case: You want to build an HR bot that answers questions about vacation entitlement (based on a PDF on the intranet) or a bot that retrieves inventory from your SAP system.
• Low-code: The whole thing works via a graphical interface in which you define conversation sequences and logics without needing in-depth programming knowledge.

Important: The License Difference (Standalone vs. Seeded) There is often confusion here, because there are two types:

1. Included in M365 Copilot: If you have the license from point 4, you can use Copilot Studio to extend your own M365 Copilot (e.g. to connect a small data source). These are often called “copilot extensions”.
   
2. Standalone License (Full Version): If you want to build standalone bots that run on your public website or trigger complex workflows in Azure, for example, you need the full Copilot Studio license. This is usually billed per tenant (according to the number of messages) and not per user.

Monitor & Optimize Licenses

Buying licenses is easy – making sure they’re worth it is the real work. Especially with the expensive Microsoft 365 Copilot license, you as an admin have to check regularly: Who is really using the tool productively and who has only activated it “just in case” but never opened it?

Microsoft provides you with the tools for this in the Admin Center.

A. The Usage Report

Here you can see the bare numbers. You can check how many users are using Copilot in which apps (Word, Teams, Outlook).

• The way: Microsoft 365 Admin Center > Berichte (Reports) > Nutzung (Usage) > Microsoft 365 Copilot.
  
• The decision-making aid: Look for the Last Activity Date column.
  • Scenario: Has a user had the license for 3 months, but the last activity was 8 weeks ago?
  • Plot: Talk to the user. Does he need training? If not, revoke the license and give it to a power user who really needs it. The user then falls back softly to the free “Commercial” version.

B. Microsoft Copilot Dashboard

If you want to know how Copilot is changing work, the dedicated dashboard (partially powered by Viva Insights) will help.

• Readiness: Shows how many users are technically ready (licenses, update channels, Entra ID).
• Adoption: Shows whether users only test Copilot once or whether it becomes a daily habit.

Important: Data protection & anonymization
By default, Microsoft does not show real names in the reports!

• If you want to see which specific employee is not using the license (to reassign it), you need to disable the display of anonymized usernames in the report settings.
• Attention: In Germany, it is essential to clarify this beforehand with the works council or data protection officer! Performance assessment is a sensitive topic.

Conclusion: Strategy before license purchase

Microsoft’s licensing structure seems chaotic at first glance, but it follows a clear logic when viewed as escalation levels . It is not necessary (and often economically nonsensical) to immediately give every employee the most expensive license.

Instead, build your strategy on this 3-step logic :

Stage 1: The obligation (data protection at no additional cost) This is the absolute minimum standard for any business.

• Your task: Technically, make sure that employees log in to the browser (Edge/Chrome) with their Work ID (Entra ID ).
• The effect: You automatically activate the “Enterprise Data Protection” (the free business version). This prevents internal company data from being used to train public AI. This will cost you €0, but it will protect you from massive compliance risks.

Stage 2: The Freestyle (Productivity Through Context) This is about return on investment (ROI). The Microsoft 365 Copilot (Paid) is not worth it for everyone.

• The target group: Identify the “knowledge workers” who handle hundreds of emails, meetings, and documents every day (management, HR, project management, marketing).
• The added value: Only in this stage does the AI access your internal data (Microsoft Graph). If you don’t need this context, you often don’t need this license.

Stage 3: Innovation (automating processes) If the standard features aren’t enough, Copilot Studio comes into play.

• The scenario: Do you have specific data in SAP, Salesforce or an SQL database and want to make it accessible via chat? Then you need this license to build your own bots that build exactly this bridge.

My expert tip for your rollout | Don’t blindly buy licenses for the entire workforce. This only leads to frustration if expectations are not met.

• Start: Roll out Copilot (Commercial/Free) for everyone to create a basic understanding of prompting in the company.
• Pilot: Select a test group (e.g. 20 power users) from different departments for the M365 Copilot license .
• Scaling: Let these pilots report where they really save time, and then decide who gets a permanent license based on data.

This way you keep costs under control and maximize the benefits.

Other sources

• Microsoft Copilot Product Page
• Microsoft Learn: Data, Privacy, and Security for Microsoft 365 Copilot

This post is also available in: Deutsch English