A practical guide / Confidential finance data
Is Copilot safe for confidential hotel financial data?
Copilot can be suitable for private hotel finance work with an approved business account and access set up for the task. Microsoft excludes work prompts, responses and Microsoft Graph data from training its base AI models. Your file access and sharing settings still matter.
Start with the exact Copilot product, licence and work account. Check the monthly pack, payroll folder and owner forecasts in turn. A useful sign-off names the data, the task and the people allowed to do the work. It also says where to save the result.
Draft a Copilot sign-off sheetApprove the account, source access and output audience together.
Check the account and data terms
Microsoft says work Copilot and Copilot Chat use falls under its Data Protection Addendum and Product Terms. In that service, Microsoft acts as a processor. Ask IT to check that the hotel’s account and planned task have this cover.
More on this step
Keep a sign-off sheet with product, plan, work tenant, data types and contract reference. A tenant is your firm’s Microsoft account environment. List the controls your plan provides. Finance can then see the terms that apply to its monthly results and forecast files.
The training rule answers one question about data use. Ask IT to check storage periods and audit settings too. Keep the answers with the task sheet. Staff can then see what is approved and where to ask when the task changes.
Read the source: Microsoft Learn: enterprise data protection
Inspect who can open the source files
Microsoft says Copilot can surface work files a user already has access to view. Review who can open payroll, accounts and draft owner reports in Microsoft 365. Include group access as well as people named on each file.
More on this step
Ask IT to check broad SharePoint groups and sharing links. Put salary detail and private forecasts in an area with access matched to the job. Give managers the cost summaries they need. Test the new access using sample work accounts.
Use a dummy payroll file with a clear title. Place it in a restricted folder. Ask finance and department test users to try opening it and finding it through Copilot. Note who should see it and what the test showed. Then resolve any gap in access.
Read the source: Microsoft Learn: Copilot data, privacy and security
Review web search, agents and output sharing
Microsoft says Bing web queries follow separate data terms. A prompt can lead to a short search query sent to Bing. Agree with IT whether web search should be on for private finance tasks. Put that choice in the work instructions.
More on this step
Microsoft also says to review each agent’s privacy statement and terms. Check which data a connected service can receive. Approve the connection for the task before the team uses it. Keep a list of allowed services on the task sheet.
Give a draft owner summary its own audience. Check the folder where it is saved and who gets its link. Use the data labels and sharing controls your Microsoft plan provides. This keeps the report’s audience clear after it leaves the chat.
Read the source: Microsoft Learn: enterprise data protection
Worked example
A forecast folder gets a clear access decision
Example with made-up details: Greywater Hotel wants its finance lead to draft comments on next quarter’s cash forecast. The source folder holds an owner funding note and a payroll workbook. IT finds that a broad management group can open both files.
The team moves the private files to a finance-only area. It creates a cost summary for managers. Tests with dummy files show the new access works as planned. Finance then approves the Copilot task using the forecast totals and owner note.
The draft goes into a private review folder. The issued management summary has its own audience and link. The sign-off sheet describes both the source access and the file made from it.
Illustrative example.
Account
Check business coverage and terms.
Permissions
Inspect who can open finance files.
Sharing
Set the audience for new reports.
Agree the personal data rules for this task
The ICO explains the contract needed between a controller and processor. It also covers security and personal data use in AI. Agree the aim, fields, access and storage period with your privacy team. Record who is in charge of the task.
Use totals when they answer the question. If named records are needed, approve the data route and assess the risks. Carry out a data protection impact assessment, or DPIA, where required. Keep pay, payment and pack sign-off decisions with authorised finance staff.
Write the sign-off so a colleague can follow it. Name the source folder, fields, account and output location. Add a contact for changes. If a task needs a new file or service, they can ask that person to review the change.
Read the source: ICO: contracts between controllers and processors; ICO: AI and data protection
Try a practical task
Prepare a task review for IT and privacy
Use this prompt to put the facts in order for IT and privacy staff.
Try this in your AI app
ChatGPT
Claude
Gemini
CodexUsing Gemini? The button copies the prompt. Paste it into the new chat.
Draft a Copilot task sheet for [hotel finance job]. Work product and account: [details]. Contract references: [DPA and terms]. Data: [types]. Source folders and access groups: [details].
Use headings for aim, inputs, source access, data terms, storage period, web search, agents and output sharing. List the settings IT needs to check. Mark each open item as awaiting a decision.
Add an access test with dummy files for finance, the department manager and payroll. End with the person who signs off the task, review date and changes that need a fresh review.
Questions about this task
Is model training switched off for business Copilot data?
Microsoft states that work prompts, responses and Microsoft Graph data are excluded from training the base AI models. Check the work account and product coverage in the Microsoft terms linked above.
Can a manager retrieve the payroll workbook?
Copilot follows the user’s existing access. Review the workbook’s file permissions, groups and sharing links, then test the approved access using dummy content.