Agent Register
Every agent · Office copilots and assistants · Microsoft

Microsoft 365 Copilot

It drafts and summarises inside the tenant using the user permissions it inherits, and prompts are not used to train models. The risk is not the tool leaking outward but the tenant being over-shared inward: Copilot surfaces every file the user technically has access to.

drafts for a human
acts on
yes
human in the loop by default
no
data leaves the tenant by default
Everything the signed-in user can already open in Microsoft 365: mail, chats, files, calendar, SharePoint
reaches by default

What that means for the register

It drafts and a person decides, so the loop is real; what it can read is the question. Data stays inside your tenant by default. Pasted with only its name it lands as control until an owner is named.

This week

Run an oversharing review of SharePoint and Teams before broad rollout, and switch on sensitivity labels so restricted content stays out of results.

What holding it is evidence for

Requirement text and artefacts from a human-verified corpus licensed to Agent Register.

Broad system reach or write access to a system of record ISO 42001 A.4.4 · ISO 42001 A.4.5 · ISO 42001 A.6.2.5 · ISO 42001 A.5.2 · EU AI Act Art.15 · EU AI Act Art.9
ISO 42001 A.4.4 Tooling resources

The organization shall document information about the tooling resources utilized for the AI system.

Evidence an auditor accepts: Tooling inventory; Tool risk assessments; Development frameworks, libraries, MLOps platforms
ISO 42001 A.4.5 System and computing resources

The organization shall document information about the system and computing resources utilized.

Evidence an auditor accepts: Infrastructure inventory; Capacity plans; Compute (CPU/GPU), storage, network resources
ISO 42001 A.6.2.5 AI system deployment

The organization shall document a deployment plan and ensure requirements are met before deployment.

Evidence an auditor accepts: Deployment plans; Go-live checklists; Approval records
ISO 42001 A.5.2 AI system impact assessment process

The organization shall establish a process to assess the potential consequences of the AI system for individuals or groups and societies.

Evidence an auditor accepts: AI impact assessment procedure; Assessment template; Methodology covering individuals, groups, societies
EU AI Act Art.15 Accuracy, robustness and cybersecurity

High-risk AI systems shall be designed and developed in such a way that they achieve an appropriate level of accuracy, robustness, and cybersecurity, and shall perform consistently in those respects throughout their lifecycle. Resilience to errors, faults and inconsistencies; protection against atte...

Evidence an auditor accepts: Accuracy/robustness measurements relevant to the intended purpose; Adversarial/data-poisoning threat modelling and mitigation; Cybersecurity controls aligned with state-of-the-art
EU AI Act Art.9 Risk management system

Providers shall establish, implement, document and maintain a risk management system as a continuous iterative process planned and run throughout the entire lifecycle of a high-risk AI system, including identification and analysis of known and reasonably foreseeable risks, estimation/evaluation of r...

Evidence an auditor accepts: Risk management system documentation; Lifecycle risk analysis records; Post-deployment risk monitoring

Do this for every tool your teams use

Paste the list and get this classification for every entry at once, with the owner column, the findings per department, and the controls the register is evidence for. Ten entries free, no account.

Build my agent register

OpenHands · Microsoft Copilot Studio