Obility Editorial · · 4 min read
The workplace Copilot answers from two places
Most AI visibility work assumes the buyer is asking a public assistant: ChatGPT, Perplexity, Gemini, or Copilot on Bing. Many business buyers have another assistant open all day: the Copilot that comes with their company’s Microsoft 365 account. That assistant answers from a different mix of sources, and part of that mix is never visible to you.
Microsoft’s own documentation for its workplace Copilot describes two kinds of grounding. One is the public web, fetched through Bing. The other is the organisation’s data in Microsoft Graph: emails, files, meetings, chats and calendars that the user already has permission to view. Microsoft gives an example in which a user asks Copilot to summarise what is known about a company they are considering buying. The response comes back in two parts, one headed “From your company’s data” and one headed “From the web”.
Which part a buyer gets depends on their licence. Microsoft’s overview says the free Copilot Chat grounds its answers in the public web and cannot reach organisational data through Microsoft Graph, unless the user uploads a file or is working on an open email or Teams conversation. The paid Microsoft 365 Copilot licence pulls from both the web and the work data automatically. For a vendor, that second case is the one that matters.
The web half sees a few words, not the buyer’s question
When Copilot does go to the web, it does not send Bing the buyer’s prompt. Microsoft’s documentation says Copilot generates a separate search query of a few words informed by the prompt, and strips the user’s identity and any whole documents from it. In Microsoft’s own example, a long question about a possible acquisition became two short searches: the company’s name plus “strategy”, and the company’s name plus “financials”.
So when a buyer asks Copilot to compare three shortlisted tools and flag the risks, the web half of the answer is likely to rest on short lookups such as your brand name plus “security” or plus “integrations”. That is good news for anyone with a clear public page on each of those facts, and bad news for anyone whose answer lives in a PDF behind a form or a slide deck nobody published.
Buyers also see less of the evidence than you might expect. Microsoft says the exact search queries are shown with the citations only in Copilot Chat. In the Copilot pane inside Word or PowerPoint, where a buyer might be drafting the comparison document itself, those citations are not shown.
An admin can switch the web half off
Microsoft gives IT admins a policy called “Allow web search in Copilot”. It can turn web search on or off for the whole tenant or for specific groups, or turn it off only in Copilot’s work mode. If an admin never sets the policy, web search stays available for commercial tenants. For United States government customers on GCC or DoD, Microsoft says web search is off by default. Users can also turn it off themselves with a Web content toggle.
When web search is off, web content is not included in the response. The buyer’s answer then comes from what the model already knows and from the files the buyer can open. Anything that changed since the model was trained, such as a new product name, a retired feature or a new certification, can only reach that buyer through their files. Security reviews give an enterprise a clear reason to restrict it, so ask a large prospect rather than assuming the web is in play.
Your sales material becomes a source in their tenant
Here is the part most AEO advice misses. Every proposal, security questionnaire, product sheet and follow-up email your team sends to a prospect lands in that prospect’s Microsoft 365 account, where their Copilot can use it. So does what your competitors send. When the buyer asks Copilot to summarise the vendors they have spoken to, those documents are the evidence.
That raises the bar for sales collateral. A deck from last year with an old plan name, a product sheet that describes a feature you have since removed, or a proposal that never states plainly what the product does will be quoted back as current. A file with no date on it gives the buyer, and their Copilot, no way to tell that it is out of date.
The practical fixes are simple. Put a date and a product version on every document that leaves the company. Open each one with a plain sentence about what the product does and who it is for, so a passage pulled out of context still makes sense. Keep the facts in sales material the same as the facts on your website, because the buyer’s Copilot may put the two side by side. Obility’s Context Manager exists for this kind of work: one owned record of product names, descriptions, audiences and approved claims, with an owner for the facts that change often, so marketing and sales draw on the same version.
Nobody outside the tenant can measure the private half
Be honest about what can be tracked. Microsoft says Copilot prompts and responses are stored inside the customer’s Microsoft 365 service boundary. No vendor, Obility included, can see what a buyer’s Copilot said about you after reading their inbox. Any report that claims to measure it is guessing.
What you can measure is the public half. Answer Engine Insights groups the buying questions you care about and keeps the answer, the competitors it names and the sources it cites with each observation. The engines covered for your programme are confirmed at the demo. Pair that with the short, brand-plus-attribute lookups described above, and check that a clear public page answers each one. For the private half, the best signal you have is your sales team. Ask prospects which assistant they used to build their shortlist, and read what they paste back to you.