Did you pay for copilot yourself or did your job provide you with a license?

The enterprise tier of copilot is supposed to have access to such data, though it can be managed trough internal policies.

Ask it to summarize your latests emails In outlook/teams messages. If it has access to those (and this is intended) then its near certainty also setup to know who is who in the organization.

Allegedly, the data is “safe” because enterprises is supposedly not harvested and used for training… which makes me conclude non enterprise use absolutely is.

Allegedly because thats what Microsoft claims and on paper it looks legal. But these tech companies never seem to actually follow the law to such a degree that any claims that unmistakably seem to fit within the legal framework automatically are sus to me.

Probably from the Microsoft 365/Teams/Outlook/whatever profile which can include who's your manager, or potentially from Outlook emails. From what I can tell, Microsoft's been trying hard to shove copilot in any of their systems, like AAD/Entra.

My company has recently migrated their emails to it and as an admin I was very surprised that you can just read any email in full in any mailbox from "regular" functionality like email trace or antispam. I have no idea how that's GDPR compliant - in my other jobs we were using Google Workspace which only shows metadata because of that, and accessing another person's mailbox by other means (e.g. resetting the password on an ex-employee account) was a huge no-no