Copilot in Outlook: what “existing policies continue to apply” actually means
Copilot is moving into the Outlook compose window itself: not a side panel you open when you want help, but a drafting experience that sits alongside every new email and every draft you reopen. Emails get written, refined and rewritten in real time, with Copilot assisting throughout rather than being invoked separately.
It is, by some distance, the most consequential place Copilot has been added so far, because email is where most organisations’ governance, retention and DLP policies are already the most mature, and the most tested.
What’s changing
General availability begins worldwide in mid-July 2026 and is expected to complete by early August (Microsoft 365 Roadmap ID 564605). It reaches users with a Microsoft 365 Copilot licence on Outlook, though not on every platform at once: Outlook on the web, New Outlook for Windows and Outlook mobile get it first, Outlook for Mac follows after the initial rollout, and Classic Outlook for Windows is planned later in 2026.
Users will see a Copilot side-by-side drafting experience when composing email, whether starting a new message or editing an existing draft.
Content can be refined, expanded or rewritten directly within the compose surface, rather than through a separate chat window. The feature is enabled by default for licensed users on supported clients, and Microsoft states that existing policies for email access, governance and protection continue to apply, with no changes to admin controls at this time.
Workflows outside the compose experience are unaffected.
Quick summary
Microsoft Outlook is integrating Copilot directly into the email compose experience, rolling out from mid-July 2026, covering:
- a side-by-side Copilot drafting experience for new messages and existing drafts
- real-time refining, expanding and rewriting of email content within the compose window itself
- enabled by default for licensed users, with existing email access, governance and protection policies said to continue applying
- a staggered platform rollout: web, New Outlook for Windows and mobile first, Mac after, Classic Outlook for Windows later in 2026
Microsoft’s own compliance answers confirm this is AI interacting directly with customer data, in the one place most organisations still treat as their formal record of communication. “Existing policies continue to apply” is true, but it is worth checking they actually cover AI-assisted drafts before assuming so.
Why this matters
Two things are worth reading carefully rather than taking at face value:
- “No changes to admin controls” is not the same as “no admin impact.” Microsoft has tagged this update ADMIN IMPACT, despite stating no new controls exist. That combination is telling: this is a policy review item, not a configuration task. The right response isn’t to look for a setting to change, it’s to confirm your existing DLP rules, sensitivity labels and retention policies genuinely extend to content that Copilot has generated or rewritten, not just content a human typed.
- The platform rollout is staggered, and that matters for how you communicate this. Organisations still relying on Classic Outlook for Windows won’t see this for some time yet. A single blanket announcement to all users risks confusing people who won’t encounter the change for months, while under-preparing those on web, New Outlook or mobile who’ll see it within weeks.
None of this means the feature is unsafe. It means it’s the first update in this series that genuinely touches mobile device policy as well as Copilot governance, and Microsoft has said as much directly, recommending organisations “review internal notification or mobile device policies if applicable.”
Who’s affected
- Users with a Microsoft 365 Copilot licence on Outlook for the web, New Outlook for Windows, or Outlook mobile immediately, with Mac and Classic Outlook for Windows users following later
- Compliance, security and governance teams responsible for email DLP, retention and sensitivity labelling
- Helpdesk teams, who should expect questions about the new compose experience once rollout reaches each platform
What we’d recommend doing now
No admin action is required, but this is worth treating as more than routine change communication:
- Confirm your existing email DLP and sensitivity label policies actually apply to Copilot-assisted drafts, rather than assuming “existing policies continue to apply” covers every scenario you’d expect it to.
- Sequence your user communications around the staggered rollout, so Classic Outlook for Windows users aren’t told about a change they won’t see for months, while web, New Outlook and mobile users get timely notice.
- Update training materials to reflect the compose experience specifically, since this is a materially different interaction to Copilot’s other Outlook features like summarising or triaging email.
- Review the linked Microsoft Learn documentation on drafting with Copilot in Outlook, which Microsoft has pointed to directly, before finalising your own internal guidance.
Where this fits with your wider Copilot governance
This belongs in the same conversation as our recent piece on Copilot’s proactive push notifications: both are examples of Copilot moving from a tool you consciously open to one embedded directly in an existing workflow, email in this case. If you’ve already reviewed your Copilot readiness position, this is a good moment to specifically check it covers Outlook’s compose experience, not just Copilot in general terms.
If you’d like support getting ahead of this one, we can help in a few ways:
- Talk to a consultant about Copilot readiness, particularly around confirming DLP and governance policies extend properly to Copilot-assisted email.
- Explore our Copilot security and compliance training, which covers exactly this kind of embedded AI scenario.
- Get in touch with our support team if you’d like help sequencing user communications around the staggered platform rollout.
Frequently Asked Questions
How do you use Copilot in Outlook?
With this update, Copilot appears as a side-by-side drafting experience when composing a new email or editing an existing draft, letting you refine, expand or rewrite content directly within the compose window rather than through a separate chat.
Where is Copilot in Outlook?
It appears directly within the compose surface when writing or editing an email, on Outlook for the web, New Outlook for Windows and Outlook mobile from mid-July 2026, with Mac and Classic Outlook for Windows following later.
What is Copilot in Outlook?
A feature that integrates Microsoft 365 Copilot into Outlook’s email compose experience, allowing licensed users to create, refine and rewrite email content with AI assistance in real time, while keeping full control over the final content sent.
How do you enable Copilot in Outlook?
No action is needed to enable it. The feature is turned on by default for any user with a Microsoft 365 Copilot licence on a supported Outlook client, once rollout reaches that platform.
Do existing email governance and DLP policies still apply to Copilot-assisted drafts?
Microsoft states that existing policies for email access, governance and protection continue to apply, with no changes to admin controls. It’s worth confirming this directly against your own configuration rather than assuming full coverage, particularly for AI-generated or AI-edited content.
When is this rolling out?
General availability begins worldwide in mid-July 2026 and is expected to complete by early August 2026, associated with Microsoft 365 Roadmap ID 564605. Outlook for Mac follows after initial rollout, and Classic Outlook for Windows is planned later in 2026.
This update is based on Microsoft 365 Roadmap ID 564605, published 17 July 2026. Rollout dates are provided by Microsoft and may change.