Microsoft makes governance the product

Microsoft is doing something more revealing than launching a new artificial intelligence feature: it is turning admin controls into a selling point for Copilot, with new settings for authoritative sources, domain exclusion, high-usage users, and prompt protection landing in the Microsoft 365 admin center in March 2026. (microsoft.com) That shift comes as Microsoft pushes Copilot from a chat box into longer-running workplace tasks, saying on March 9 that “Copilot Cowork” can break requests into steps, run for minutes or hours, and let workers review, guide, or stop the job while it is in progress. (microsoft.com) Once software can draft a memo, search the web, pull files, and keep working after the first prompt, the hard question stops being “can it write” and becomes “what was it allowed to read, which sources did it trust, and who can audit the result.” Microsoft’s own March 9 post answered that with phrases like “work is observable” and “actions are transparent.” (microsoft.com) The new controls are aimed straight at that problem. Microsoft said admins can now manage authoritative sources inside Copilot Search, exclude domains, track high-usage users, and use Microsoft Purview Data Loss Prevention to safeguard web searches and prompts. (microsoft.com) Microsoft Purview Data Loss Prevention is the company’s rule system for blocking sensitive material, and its current documentation says it can stop Microsoft 365 Copilot and Copilot Chat from processing prompts with items like credit card numbers, passport numbers, or Social Security numbers, and can also block labeled files and emails from being used in responses. (learn.microsoft.com) Microsoft is also adding more ways to inspect how Copilot is being used. Its Prompt Gallery documentation says admins can track which prompts a specific user saved, liked, or shared, and which prompts were shared with a team, with that data stored inside the customer’s Microsoft 365 tenant boundary. (learn.microsoft.com) Even the user interface is being tuned for trust. Microsoft said in its March 2026 Copilot update that admins can add a branded footer to the Microsoft 365 Copilot app so workers know they are using an approved, organization-managed tool rather than some random public chatbot. (microsoft.com) At the same time, Microsoft had to clean up a message that pointed the other way. On April 7, 2026, the company told Moneycontrol that Copilot language describing the service as being for “entertainment purposes only” was outdated wording left over from the early Bing Chat era and would be revised to match Copilot’s current productivity and enterprise role. (moneycontrol.com) That clarification matters because Microsoft is asking companies to trust Copilot with drafting, summarization, automation, and multi-step work inside Microsoft 365, while its own public terms still carried a line better suited to a toy than to software used in legal, finance, or compliance-heavy offices. (moneycontrol.com, microsoft.com) Microsoft is also quietly changing how hard it pushes the Copilot name in Windows. Windows Central reported this week that a new Notepad update for Windows Insiders removes explicit Copilot branding and replaces it with plain “writing tools,” while the artificial intelligence rewriting features themselves stay in the app. (windowscentral.com) Put those pieces together and the pattern is clear: Microsoft is still expanding Copilot’s capabilities, but the bigger product story in April 2026 is controls, audit trails, approved sources, and cleaner language about what the system is actually for. The branding is getting quieter just as the governance layer gets louder. (microsoft.com, moneycontrol.com, windowscentral.com, microsoft.com)