Microsoft Copilot for Lawyers: What It Is Actually Good At, and the Oversharing Problem

Microsoft Copilot for lawyers has two reputations, and both are earned. Here is the first, from a practitioner on r/legaltech: “In the past week for me, copilot has: hallucinated citations; generated quotes never uttered by any human; hallucinated the practice groups in my law firm; inexplicably started speaking Spanish in the middle of a thread in excel.” Another commenter: “this is not a serious product for serious people.”

Here is the second. In ILTA’s 2025 survey of 580 law firms, Copilot was the generative AI tool most firms reported using, at 68%, ahead of CoCounsel Core (36%) and Harvey (33%). Among Texas lawyers who use AI, Copilot use grew from 31% to 44% between 2024 and 2026 (State Bar of Texas). And when the UK Upper Tribunal wanted an example of a tool that keeps client letters out of the public domain, it named this one: “Closed source AI tools which do not place information in the public domain, such as Microsoft Copilot, are available for tasks such as summarising without these risks” ([2026] UKUT 81 (IAC)).

Both camps are describing different jobs: Copilot is a good assistant for the work that lives in Outlook, Teams and Word, and a poor one for anything that needs a legal source. What follows sorts one from the other, then deals with the risk almost nobody prices in: your own permissions.

Three Copilots, and only one of them is the product your firm bought

The word covers three things, and the confusion between them is where most confidentiality mistakes start (Microsoft Learn has the current names: “Microsoft 365 Copilot is now named Microsoft Copilot”).

The consumer tier matters because so many lawyers have a personal Microsoft account on the same laptop. Its opt-out (Settings, Privacy, Training on conversation activity) covers only future conversations and does not stop use “for advertising, digital safety, security, and compliance purposes”.

The licensed product is the one worth talking about. Under enterprise data protection, “prompts, responses, and data accessed through Microsoft Graph aren’t used to train foundation models”, and prompts and responses are “protected by the same contractual terms and commitments widely trusted by our customers for their emails in Exchange and their files in SharePoint”. That is a stronger position than any consumer chatbot, as the confidentiality comparison for ChatGPT shows.

What Copilot is good at: threads, recaps, first drafts and Excel

Clifford Chance announced its firm-wide Copilot rollout in February 2024 and described four uses: summarising an email chain for a client report; “finding the needle in the haystack” (how much was that bond issue?); originating information (“which of the banks in this syndicate have responded?”); and asking Copilot “what is wrong with the argument and to find the weakness” (Legal IT Insider). In Microsoft’s customer story, the firm’s Jenni Polson gave her working prompt: “summarise emails in a table format from time sent, sender, actions for me or my team.”

That is the pattern. Copilot’s advantage is not the model, which is the same OpenAI and Anthropic technology you can rent elsewhere; it is that Copilot sees the forty-message Outlook chain, the Teams recording and the open Word document without you pasting anything.

Summarise this Outlook thread for a lawyer who has not read it, in under 150 words. Then produce a table: Date sent | Sender | What was asked or promised (quote the words) | Who owns the next step | Deadline stated or implied. Include every commitment our side made, even in passing. Add a section headed "Open questions" listing anything the counterparty asked that nobody answered. Do not add facts that are not in the thread; where a date or owner is unclear, write UNCLEAR rather than guessing.

In Word, the tasks that work are summarising obligations and renewal dates with section numbers, rewriting for a lay reader, and comparing two agreements “in a table including areas addressed in one agreement and not the other”, as Microsoft’s own contract-review scenario puts it. The document summarisation guide covers these tasks.

What Copilot is bad at: citations, invented practice groups and Spanish in Excel

Microsoft says it plainly: responses “aren’t guaranteed to be 100% factual”. GC AI’s July 2026 analysis names the gaps in-house lawyers hit first: no persistent legal context (no playbooks, no fallback positions) and citations that need verification. In Coomer v. Lindell “Microsoft Word’s Co-Pilot” headed the list of tools MyPillow’s lawyers had used for a brief with nearly thirty defective citations; $3,000 each.

The traffic also comes the other way: a UK solicitor told RollOnFriday in September 2026 that after a client sent in a Copilot answer, “We spent a few hours chasing copilot’s hallucination so that we could confirm that our original advice was correct.”

The rule: Copilot may summarise, draft and compare; it may not be the source of a legal proposition. If an answer contains a case, a statute or a rule number, open it in a real database first. The in-house counsel guide has the matching split for legal departments.

The Legal Agent in Word (April 2026)

On 30 April 2026 Microsoft announced a Legal Agent in Word through its Frontier early-access programme (Microsoft 365 Copilot Blog). It reviews a contract clause by clause against a playbook, flags provisions that miss your standard and writes the redline as tracked changes. It needs a Copilot licence, Frontier enrolment and Word for Windows desktop (version 2604 or higher), worldwide. Two weeks earlier Microsoft had announced word-level tracked changes in Word and said it was integrating “the technology behind Claude Cowork into Microsoft 365 Copilot” alongside OpenAI’s models.

Two cautions. The agent is only as good as the playbook you give it; without one it comments at a generic market position, the same failure mode as pasting a contract into ChatGPT (the guide to contract review against a playbook shows how to write one). And redlining is one of the two tasks (the other was EDGAR research) on which lawyers still beat every tool tested, 79.7% against 65.0% in Vals AI’s February 2025 benchmark.

Oversharing: the risk is your permissions, not Microsoft’s training

Here is the part the vendor demo skips. The licensed Copilot “serves as a natural language window into everything a user has permission to access”, which in most firms is far more than anyone intended. As the ABA’s Law Technology Today put it in 2026: “Permissions set years ago and never revisited now define what an AI tool will surface on demand.” Its example: “An attorney asking Copilot to summarize what it knows about a partner’s practice area could receive far more than they expected” (ABA Law Technology Today).

The fix is already in the licence. Sensitivity labels at the highest level “block Copilot from including certain documents in its responses … even if the user has permission to see them”. Retention policies apply to Teams recaps too, which matters because a recap of a client call is a transcript that, in the New York City Bar’s words, can “formalize everything that was said, including informal legal advice” (see AI note-takers on client calls).

Draft a pre-deployment checklist for enabling Microsoft Copilot at a [40-lawyer] firm, for the IT lead and the risk partner: (1) run SharePoint oversharing reports and list every site open to "Everyone"; (2) apply sensitivity labels to privileged, investigation, HR and deal folders and confirm which label level blocks Copilot; (3) confirm enterprise data protection is on and prompts are not used to train foundation models; (4) set retention for Copilot interactions and Teams recaps; (5) decide whether web grounding and Anthropic models stay on for EU users; (6) a dated reasoning note per decision. End with a plain-English paragraph to lawyers on what Copilot can and cannot see.

Put the outcome in writing; the law firm AI policy template has a slot for it, and underwriters have started asking; Aon’s Stan Sterna in April 2026: “They’re asking firms, ‘Do you use AI? Do you police it? Do you have protocols in place?’”

The EU Data Boundary and the Anthropic exclusion

For European firms two footnotes on Microsoft’s enterprise data protection page matter more than the headline. Web queries go to Bing “with user and tenant identifiers removed”, with Microsoft as an independent controller, and: “The EU Data Boundary doesn’t apply to web search queries. In addition, Anthropic models are currently excluded from the EU Data Boundary and when applicable, in-country processing commitments.” HIPAA coverage likewise “doesn’t apply to web search queries”.

The rollout maths: Clifford Chance’s 15 minutes and Microsoft’s own legal department

Clifford Chance’s Anthony Vigneron gave the only cost justification a partner needs: “if we save 15 minutes per lawyer per week it will pay for itself. And we are saving more than that.” The journalist’s napkin estimate for 7,000-plus staff was around $2.7m a year. The firm never blocked generative AI, ran a traffic-light matrix of data types against tools (risk chief Bahare Heywood: “If it’s green, knock yourself out”) and made training mandatory.

Microsoft’s own legal department, CELA, is the other reference point: roughly 2,000 people, a chief legal officer (Hossein Nowbar) who says “Adoption of AI is not a luxury for legal departments; it’s a necessity”, and a department that needed a “CELA Copilot skilling series” to get a 50% lift in Copilot use, and on 23 July 2026 it adopted Harvey on top (LawNext). If the company that makes Copilot pairs it with a legal platform, “productivity layer plus legal layer” is what the vendor does, not a pitch. From below, ILTA found only 8% of firms with Copilot deployed firm-wide; Shoosmiths offered a GBP 1m bonus pot for one million prompts. Licences do not create adoption; training does.

Twelve prompts that work in Word, Outlook and Teams

The first two are GC AI’s published Copilot prompts; longer versions with verification steps are in the prompt library.

From this meeting, list every decision, every action item with owner and due date, every open question, and every commitment made to the client. Quote the speaker for each commitment. Exclude anything that was legal advice to the client; just note "advice given on [topic]". Then draft a five-line follow-up email to attendees. If the recap is missing part of the meeting, say which part rather than reconstructing it.

Copilot alongside Claude and ChatGPT: the productivity layer and the legal layer

Harvey’s pitch for living inside Copilot (it has been reachable there as an @Harvey agent since March 2026) is a sentence lawyers should read twice: “Legal teams don’t need more tools. They need the tools they already use to work smarter for them.” Copilot owns the twenty small tasks a day that touch your mailbox and your documents. It does not own the memo, the redline against a playbook, the research question or the long document, which belong in a frontier model on a business tier or a legal platform, as the tools map sets out layer by layer. The Singapore Academy of Law and Microsoft’s joint prompt guide compresses the rule to three words: “Copilot, not autopilot.”

Where to go next: the tools cluster has the companion guides to ChatGPT, Claude and the legal platforms. If you would rather see the split than read about it, the live sessions of AI Lab for Lawyers work in the browser tools most lawyers already have and are candid about which tasks to leave in Copilot and which to move to a frontier model.