Skip to content
Request a demoGet a demo
All integrations
Microsoft Copilot

Microsoft Copilot security: inline prompt DLP and M365 readiness.

Prevent data leaks in Microsoft Copilot from both sides: mask or block sensitive prompts in the browser and clean up overshared SharePoint and OneDrive permissions before Copilot indexes them.

Request a demo See the workflow

Managed browser extension · Pairs with SharePoint & OneDrive DLP

Capabilities

What this integration covers.

01

Separate Entra ID from consumer Copilot.

Spot employees using personal Microsoft accounts on copilot.microsoft.com where Enterprise Data Protection does not apply.

02

Mask or block sensitive prompts.

Sanitize sensitive entities with coherent fictional values or block regulated prompts and text-file uploads inline.

03

Fix M365 oversharing before indexing.

Combine browser controls with Elba’s SharePoint and OneDrive integrations to revoke broad internal links Copilot could surface.

Example workflow

Govern Microsoft Copilot across browser and storage.

How the integration supports a specific security task.

  1. 01

    Clean up M365 links

    Connect SharePoint and OneDrive to remove org-wide links on sensitive internal files.

  2. 02

    Monitor Copilot sessions

    Deploy the Elba browser extension to distinguish corporate Entra ID sessions from personal Copilot use.

  3. Mask or block inline

    Enforce Playbooks that mask or block sensitive prompts and text uploads before submission.

Related capability

Explore this part of the platform.

Explore AI & browser security

Before you connect

Coverage, permissions, and requirements.

Inline prompt and upload protection for web Microsoft Copilot runs through the Elba browser extension. Internal Microsoft 365 data exposure surfaced by Copilot is addressed through Elba’s SharePoint and OneDrive Data Protection connections.

Explore security & privacy
How do I prepare SharePoint and OneDrive permissions before rolling out Copilot?

Connect Elba’s SharePoint and OneDrive Data Protection integrations to find Anyone and organization-wide links, confirm business need with owners in Teams, and remove unneeded permissions.

Can Elba stop employees from pasting sensitive data into consumer Copilot?

Yes. The Elba browser extension detects personal or unauthenticated web Copilot sessions and masks sensitive prompt values with coherent fictional replacements or blocks the send.

Does Elba require Microsoft Purview to protect Copilot?

No. Elba deploys inline browser prompt protection via MDM and audits SharePoint/OneDrive sharing directly via Microsoft Graph without requiring Purview DLP rule configuration.

Coverage and requirements
  • Inline prompt masking and blocking apply to web Copilot sessions in enrolled browsers, not native desktop Office ribbon sidebars.
  • File-upload content inspection covers up to 5 supported text or code files (16,000 characters each); binary files expose metadata only.
  • Cleaning up internal files indexed by Microsoft 365 Copilot requires enabling Elba’s separate SharePoint and OneDrive Data Protection connections.

Other applications

Review more integrations.

All integrations

SharePoint

Audit SharePoint Online site sharing, external guests, and Copilot exposure.

OneDrive

Detect exposed OneDrive for Business links, verify owners, and revoke access.

Microsoft 365

Directory sync, with separate connections for file sharing and Teams.

Discuss your requirements

Evaluate Elba for Microsoft Copilot.

Review the available capabilities, required permissions, and setup for your environment with our team.

Request a demo