It only reads. It never writes.
Copilot Insights connects with read-only Microsoft Graph consent and looks at activity metadata only. Prompts, chats, emails and documents are never read — which is why most security sign-offs take a day rather than a quarter.
What it reads
Read-only Microsoft Graph scopes for licence and usage reporting, plus directory read to inventory agents.
Licence assignmentWhich Copilot SKUs the tenant holds and who they are assigned to.Usage signalsThe activity reports Microsoft already produces — whether a seat is being used, and in which app.Directory metadataDisplay name, sign-in name and department, so a reclaim list names a person rather than a GUID.Agent inventoryCopilot Studio agents with their owner, status, channels and knowledge sources.
What it cannot do
There are no write permissions in the consent, so these are not policy choices — they are impossible.
- Reassign, remove or buy a licence
- Create, change, publish or delete an agent
- Read a prompt, a chat, an email or a document
- Change any setting in the tenant
- Send mail or post to Teams on your behalf
- See another customer’s tenant, ever
Revoke access any time from Microsoft Entra → Enterprise applications → Copilot Insights → Remove.
The six things a security review asks about
Metadata, never content
The product answers “is this seat being used” and “does this agent exist”. It never answers “what did somebody ask Copilot”, because it never has that data.
Anonymisation
User names can be anonymised in the product and in exports, so a reclaim list can be reviewed by people who should not see who is who.
Tenant isolation
Every query is scoped to a single tenant. One customer’s estate is never visible to another, and multi-tenant customers see each client in its own workspace.
Self-hosting
A standard Azure application — App Service plus Azure SQL — so on Enterprise and Partner plans it deploys entirely inside your own subscription and region.
Revocation
Remove consent from Microsoft Entra at any time; access ends immediately. You can also delete the organisation and every scan it holds.
Deletion on request
Deleting your organisation removes the scans, the user metadata and the reports derived from them. Nothing is retained for analytics.
Send this to your security team.
Read-only consent, metadata only, tenant isolation, anonymisation, self-hosting and one-click revocation. If there is a question we have not answered, ask us.
More on Copilot Insights
Every page of the Copilot Insights sub-site, and the way back to the rest of LogiSam.