Before you enable Microsoft 365 Copilot on CUI work: what to check first
Copilot in a government cloud still uses each person's existing access. For manufacturers and distributors that handle CUI, check the contract, the permissions, and the labels before you assign licenses.
This note is for owners, presidents, CFOs, and operations leaders at mid-market manufacturers and distributors that handle Controlled Unclassified Information (CUI), or that sell into a defense supply chain where someone has asked to turn on Microsoft 365 Copilot.
The short version
Do not assign Copilot licenses for CUI work until you know which Microsoft cloud the contract allows, which people can already open the CUI, and which CMMC terms are in the solicitations and contracts you hold. Microsoft says Copilot in a government cloud stays inside that cloud, and that it only surfaces organizational data the signed-in person can already view. Moving the tenant, or buying the license, does not close a SharePoint library, a Teams channel, or a mailbox that too many people can open.
Match the cloud to the contract
Microsoft describes three U.S. government clouds. GCC is for U.S. data residency when you do not handle ITAR, DFARS-regulated CUI, or DoD mission data. GCC High is for CUI, or for contracts that require FedRAMP High, DFARS, or ITAR or EAR compliance. A separate DoD environment is for organizations that are part of, or directly support, the department and need that higher isolation. Microsoft still calls that environment DoD. The department’s July 2026 pages use the name Department of War.
Microsoft’s government cloud overview says Copilot is available in GCC, GCC High, and DoD, inside the customer’s government cloud tenant. Prompts, responses, and generated content stay in that cloud. Copilot inherits that environment’s security and compliance controls. Customers still have to configure Microsoft 365 and Copilot for their own obligations.
The cloud is where the data sits. It is not the list of who may open a file. A vendor note published on October 27, 2026 says that directly for defense contractors. (Copilot in GCC High uses existing CUI permissions)
Copilot uses the access people already have
Microsoft’s privacy documentation says Copilot surfaces only organizational data the person can already view, including content shared outside the company through Teams shared channels. Purview’s Copilot DLP article says a prompt runs as the person who sent it. An item shows up in a response only if that person can already open it. If a buyer, a quality technician, and a shared mailbox can all open a drawing, Copilot can use it for each of them. The license adds no tighter rule. This is an illustration, not a client story.
Before any license, the October 27 note says to list program sites, shared mailboxes, and Teams channels, including people outside the program. If you cannot yet show how covered files move through quoting, engineering, the floor, and quality, start with CMMC preparation for smaller defense suppliers.
For each place, write who can open it today and who needs it for the contract. Include broad groups, inherited access, guests, and synced folders. Remove people who changed roles, retire links left open after one shipment, and confirm a shared mailbox does not give a wide group the program inbox. Microsoft’s Zero Trust guidance for Copilot says to give people just enough access to do the job, and no more, using site access reviews and defined security groups.
Labels and DLP, where the tenant has them
Who can open a file, and whether Copilot may use it in an answer, are separate controls. The October 27 note says encryption alone does not keep an item out of Copilot, and it says to confirm the controls exist in GCC High before you depend on them.
Sensitivity labels are recognized by Copilot. When a label encrypts the item, Copilot returns the content only if that person has the copy right Microsoft calls EXTRACT. Purview DLP for the Copilot location can stop Copilot from using files and emails that carry labels you name. The item can still appear as a citation. The same location can block a prompt that contains a sensitive information type, or block web search for that prompt. Those two conditions cannot share one rule. DLP does not scan a file uploaded into the prompt. It checks the typed text. Microsoft’s article does not say every government cloud already offers this location. Test one labeled file in your admin center first.
Reconcile the CMMC terms
On July 13, 2026, the Department of War suspended CMMC Phase II requirements that had been scheduled for November 10, 2026. Phase I self-assessments remain, and the duty to safeguard covered defense information under DFARS 252.204-7012 remains. (July 13, 2026 release)
The CMMC About page still describes that pause: the program is in Phase 1, with Level 1 self-assessment for federal contract information and Level 2 self-assessment against the 110 requirements in NIST SP 800-171 Revision 2 for CUI. The calendar has already moved once. Read the live page on the day you decide.
Then read the solicitation, the contract, and any amendment or flowdown. Note the level, whether it says self-assessment or a third-party assessment, and which information you are asked to receive. If the clause and the About page differ, ask the contracting party and your contract counsel before you change an assessment plan. Keep protecting the CUI you already hold. What a fractional CISO costs is a separate question, and that guide quotes public market ranges, not an EdgePoint fee.
Before the first license
- Name the cloud the contract allows: commercial, GCC, GCC High, or the DoD environment.
- List who can open CUI today, including inherited groups, guests, shared mailboxes, and Teams.
- Tighten that list to the people who need the files, and record what you removed.
- Label what you can, and test DLP where the tenant offers it. A citation can remain. A file dropped into the prompt is outside that scan.
- Reconcile CMMC terms on the current department page with each contract. Do not commission a third-party assessment, or skip a self-assessment, because a summary said the calendar moved.
- Then assign licenses to named people, for named work.
If that access list is long and nobody owns the cleanup, the license is early. Fractional CISO support is the conversation for the review, the contract questions, and the risk your leaders still accept. Whether Copilot should change a process is a different decision, covered in what a fractional CAIO owns.
How EdgePoint approaches it
We separate the cloud decision, the access cleanup, and the license. Scope and fees are agreed in writing before paid work begins. An initial conversation is free and is separate from paid work. If Copilot is already on the agenda, start a conversation and bring the clause and a list of where CUI sits today.
Sources
Accessed November 6, 2026. Check the live page before you act.
- Microsoft Learn, Government clouds and Copilot.
- Microsoft Learn, Copilot data, privacy, and security.
- Microsoft Learn, Zero Trust for Copilot.
- Microsoft Learn, Sensitivity labels.
- Microsoft Learn, DLP for Microsoft 365 Copilot.
- GlobeNewswire, October 27, 2026, Copilot in GCC High uses existing CUI permissions. A vendor note, not a department or Microsoft publication.
- Department of War, July 13, 2026, CMMC Phase II suspension.
- Department of War CIO, About CMMC.
Frequently asked questions
Does GCC High make Microsoft 365 Copilot safe for CUI?
No. Microsoft says Copilot in GCC High runs inside that government cloud, and that prompts and responses stay there. It also says Copilot only surfaces organizational data the signed-in person can already view. You still have to limit who can open CUI, and you still have to configure the tenant for the contract.
What should we check before assigning Copilot licenses on CUI work?
Confirm which cloud the contract allows, list who can open CUI in SharePoint, Teams, and mail, tighten anything broader than the work requires, apply sensitivity labels and test Purview data loss prevention where that cloud offers it, and read the CMMC clause in each relevant contract. Assign licenses after those checks, to named people.
Can a sensitivity label or DLP policy keep Copilot away from CUI?
They can help, where the controls exist in your cloud. Microsoft says an encrypted sensitivity label returns content only if the person has the EXTRACT copy right. A Purview DLP policy for the Copilot location can exclude labeled files and emails from the answer, though the item may still appear as a citation. DLP does not scan a file uploaded straight into the prompt. Confirm the control in your tenant before you rely on it.
What happened to the CMMC Phase II third-party assessment date?
On July 13, 2026, the Department of War suspended Phase II requirements that had been scheduled for November 10, 2026. Its CMMC About page says the program is paused in Phase 1, self-assessments remain, and DFARS 252.204-7012 still requires protection of covered defense information. Read your solicitation, contract, and any amendment. This article is not the clause.
Is Microsoft 365 Copilot available in GCC and GCC High?
Microsoft's government cloud overview says yes, in GCC, GCC High, and the DoD environment, inside the customer's government cloud tenant. Feature availability can differ from the commercial cloud, and features can arrive later. Compare what your tenant actually offers with the work you want people to do.