Copilot transforms the developer experience. Backed by the leaders in AI, Copilot provides contextualized assistance throughout the software development lifecycle, from code completions and chat assistance in the IDE to code explanations and answers to docs in and more. With Copilot elevating their workflow, developers can focus on: value, innovation, and happiness.

Copilot enables developers to focus more energy on problem solving and collaboration and spend less effort on the mundane and boilerplate. That’s why developers who use Copilot report up to 75% higher satisfaction with their jobs than those who don’t and are up to 55% more productive at writing code without sacrifice to quality, which all adds up to engaged developers shipping great software faster.

Copilot integrates with leading editors, including Visual Studio Code, Visual Studio, JetBrains IDEs, and Neovim, and, unlike other AI coding assistants, is natively built into . Growing to millions of individual users and tens of thousands of business customers, Copilot is the world’s most widely adopted AI developer tool and the competitive advantage developers ask for by name.

Copilot Free is a new free pricing tier with limited functionality for individual developers. Users assigned a Copilot Business or Copilot Enterprise seat are not eligible for access. Users with access to Copilot Pro through a paid subscription, trial, or through an existing verified OSS, student, faculty, or MVP account may elect to use Free instead. 

Copilot is trained on all languages that appear in public repositories. For each language, the quality of suggestions you receive may depend on the volume and diversity of training data for that language. For example, JavaScript is well-represented in public repositories and is one of Copilot’s best supported languages. Languages with less representation in public repositories may produce fewer or less robust suggestions.

Copilot is available as an extension in Visual Studio Code, Visual Studio, Vim, Neovim, the JetBrains suite of IDEs, and Azure Data Studio. Although code completion functionality is available across all these extensions, chat functionality is currently available only in Visual Studio Code, JetBrains, and Visual Studio. Copilot is also supported in terminals through CLI and as a chat integration in Windows Terminal Canary. With the Copilot Enterprise plan, Copilot is natively integrated into .com. All plans are supported in Copilot in Mobile. Mobile for Copilot Pro and Copilot Business have access to Bing and public repository code search. Copilot Enterprise in Mobile gives you additional access to your organization's knowledge.

No, Copilot generates suggestions using probabilistic determination.

• When thinking about intellectual property and open source issues, it is critical to understand how Copilot really works. The AI models that create Copilot’s suggestions may be trained on public code, but do not contain any code. When they generate a suggestion, they are not “copying and pasting” from any codebase.

• To generate a code suggestion, the Copilot extension begins by examining the code in your editor—focusing on the lines just before and after your cursor, but also information including other files open in your editor and the URLs of repositories or file paths to identify relevant context. That information is sent to Copilot’s model, to make a probabilistic determination of what is likely to come next and generate suggestions.

• To generate a suggestion for chat in the code editor, the Copilot extension creates a contextual prompt by combining your prompt with additional context including the code file open in your active document, your code selection, and general workspace information, such as frameworks, languages, and dependencies. That information is sent to Copilot’s model, to make a probabilistic determination of what is likely to come next and generate suggestions.

• To generate a suggestion for chat on .com, such as providing an answer to a question from your chat prompt, Copilot creates a contextual prompt by combining your prompt with additional context including previous prompts, the open pages on .com as well as retrieved context from your codebase or Bing search. That information is sent to Copilot’s model, to make a probabilistic determination of what is likely to come next and generate suggestions. 

Copilot has multiple offerings for organizations and an offering for individual developers. All the offerings include both code completion and chat assistance. The primary differences between the organization offerings and the individual offering are license management, policy management, and IP indemnity.

Organizations can choose between Copilot Business and Copilot Enterprise. Copilot Business primarily features Copilot in the coding environment - that is the IDE, CLI and Mobile. Copilot Enterprise includes everything in Copilot Business. It also  adds an additional layer of customization for organizations and integrates into .com as a chat interface to allow developers to converse with Copilot throughout the platform. Copilot Enterprise can index an organization’s codebase for a deeper understanding of the customer’s knowledge for more tailored suggestions and will offer customers access to fine-tuned custom, private models for code completion.

Copilot Individual is designed for individual developers, freelancers, students, educators, and open source maintainers. The plan includes all the features of Copilot Business except organizational license management, policy management, and IP indemnity.

Copilot is powered by generative AI models developed by , OpenAI, and Microsoft. It has been trained on natural language text and source code from publicly available sources, including code in public repositories on .

Copilot Autofix provides contextual explanations and code suggestions to help developers fix vulnerabilities in code, and is included in Advanced Security.

Copilot is entirely optional and requires you to opt in before gaining access. You can easily configure its usage directly in the editor, enabling or disabling it at any time. Additionally, you have control over which file types Copilot is active for.

Access to Copilot Business and Enterprise is managed by your Administrator. They can control access to preview features, models, and set Copilot policies for your organization. Additionally, you can use your network firewall to explicitly allow access to Copilot Business and/or block access to Copilot Pro or Free. For more details, refer to the documentation.

Copilot has multiple offerings for organizations and an offering for individual developers. All the offerings include both code completion and chat assistance. The primary differences between the organization offerings and the individual offering are license management, policy management, and IP indemnity.

Organizations can choose between Copilot Business and Copilot Enterprise. Copilot Business primarily features Copilot in the coding environment - that is the IDE, CLI and Mobile. Copilot Enterprise includes everything in Copilot Business. It also  adds an additional layer of customization for organizations and integrates into .com as a chat interface to allow developers to converse with Copilot  throughout the platform. Copilot Enterprise can index an organization’s codebase for a deeper understanding of the customer’s knowledge for more tailored suggestions and will offer customers access to fine-tuned custom, private models for code completion.

Copilot Pro is designed for individual developers, freelancers, students, educators, and open source maintainers. The plan includes all the features of Copilot Business except organizational license management, policy management, and IP indemnity.

If you're on the Free plan, you can upgrade to Pro through your Copilot settings page or directly on the Copilot marketing page.

Copilot Free users are limited to 2000 completions and 50 chat requests (including Copilot Edits).

Copilot Autofix provides contextual explanations and code suggestions to help developers fix vulnerabilities in code, and is included in Advanced Security and available to all public repositories.

Copilot processes personal data based on how Copilot is accessed and used: whether via .com, mobile app, extensions, or one of various IDE extensions, or through features like suggestions for the command line interface (CLI), IDE code completions, or personalized chat on .com. The types of personal data processed may include:

• User Engagement Data: This includes pseudonymous identifiers captured on user interactions with Copilot, such as accepted or dismissed completions, error messages, system logs, and product usage metrics. 

• Prompts: These are inputs for chat or code, along with context, sent to Copilot's AI to generate suggestions. 

• Suggestions: These are the AI-generated code lines or chat responses provided to users based on their prompts. 

• Feedback Data: This comprises real-time user feedback, including reactions (e.g., thumbs up/down) and optional comments, along with feedback from support tickets.

No. does not use either Copilot Business or Enterprise data to train its models. 

How uses Copilot data depends on how the user accesses Copilot and for what purpose. Users can access Copilot through the web, extensions, mobile apps, computer terminal, and various IDEs (Integrated Development Environments). generally uses personal data to:

• Deliver, maintain, and update the services as per the customer's configuration and usage, to ensure personalized experiences and recommendations

• Troubleshoot, which involves preventing, detecting, resolving, and mitigating issues, including security incidents and product-related problems, by fixing software bugs and maintaining the online services' functionality and up-to-dateness

• Enhance user productivity, reliability, effectiveness, quality, privacy, accessibility, and security by keeping the service current and operational

These practices are outlined in ’s Data Protection Agreement (DPA), which details our data handling commitments to our data controller customers. 

also uses certain personal data with customer authorization under the DPA, for the following purposes:

• Billing and account management

• To comply with and resolve legal obligations 

• For abuse detection, prevention, and protection, virus scanning, and scanning to detect violations of terms of service

• To generate summary reports for calculating employee commissions and partner incentives

• To produce aggregated reports for internal use and strategic planning, covering areas like forecasting, revenue analysis, capacity planning, and product strategy,

For details on 's data processing activities as a controller, particularly for Copilot Pro customers, refer to the Privacy Statement.

If and for how long ’s retains Copilot data depends on how a Copilot user accesses Copilot and for what purpose. The default settings for Copilot Business and Enterprise Customers are as follows: 

Access through IDE for Chat and Code Completions:

• Prompts and Suggestions: Not retained

• User Engagement Data: Kept for two years.

• Feedback Data: Stored for as long as needed for its intended purpose.

All other Copilot access and use:

• Prompts and Suggestions: Retained for 28 days.

• User Engagement Data: Kept for two years.

• Feedback Data: Stored for as long as needed for its intended purpose.

Retaining prompts and suggestions is necessary for chat on .com, mobile, and CLI Copilot because those features’ effectiveness depends on using thread history to improve responses. The Copilot model requires access to previous interactions to deliver accurate and relevant suggestions. 

Yes. and customers can enter a Data Protection Agreement that supports compliance with the GDPR and similar legislation.

While we've designed Copilot with privacy in mind, the expansive definition of personal data under legislation like the EU’s General Data Protection Regulation (GDPR) means we can't guarantee it will never output such data. The Large Language Model (LLM) powering Copilot was trained on public code and there were instances in our tests where the tool made suggestions resembling personal data. These suggestions were typically synthesized and not tied to real individuals. 

These actions are available to Copilot users as described in the Privacy Statement.

The primary IP considerations for Copilot relate to copyright. The model that powers Copilot is trained on a broad collection of publicly accessible code, which may include copyrighted code, and Copilot’s suggestions (in rare instances) may resemble the code its model was trained on. Here’s some basic information you should know about these considerations:

Copyright law permits the use of copyrighted works to train AI models:  Countries around the world have provisions in their copyright laws that enable machines to learn, understand, extract patterns, and facts from copyrighted materials, including software code. For example, the European Union, Japan, and Singapore, have express provisions permitting machine learning to develop AI models. Other countries including Canada, India, and the United States also permit such training under their fair use/fair dealing provisions. Copilot’s AI model was trained with the use of code from ’s public repositories—which are publicly accessible and within the scope of permissible copyright use.

What about copyright risk in suggestions? In rare instances (less than 1% based on ’s research), suggestions from may match examples of code used to train ’s AI model. Again, Copilot does not “look up” or “copy and paste” code, but is instead using context from a user’s workspace to synthesize and generate a suggestion.

Our experience shows that matching suggestions are most likely to occur in two situations: (i) when there is little or no context in the code editor for Copilot’s model to synthesize, or (ii) when a matching suggestion represents a common approach or method. If a code suggestion matches existing code, there is risk that using that suggestion could trigger claims of copyright infringement, which would depend on the amount and nature of code used, and the context of how the code is used. In many ways, this is the same risk that arises when using any code that a developer does not originate, such as copying code from an online source, or reusing code from a library. That is why responsible organizations and developers recommend that users employ code scanning policies to identify and evaluate potential matching code.

In Copilot, you can opt whether to allow Copilot to suggest code completions that match publicly available code on .com. For more information, see "Configuring Copilot settings on .com". If you have allowed suggestions that match public code, Copilot can provide you with details about the matching code when you accept such suggestions. Matching code does not necessarily mean copyright infringement, so it is ultimately up to the user to determine whether to use the suggestion, and what and who to attribute (along with other license compliance) in appropriate circumstances.

Yes, Copilot does include an optional code referencing filter to detect and suppress certain suggestions that match public code on .

• has created a duplication detection filter to detect and suppress suggestions that contain code segments over a certain length that match public code on . This filter can be enabled by the administrator for your enterprise and it can apply for all organizations within your enterprise, or the administrator can defer control to individual organizations. 

• With the filter enabled, Copilot checks code suggestions for matches or near-matches against public code on of 65 lexemes or more (on average,150 characters). If there is a match, the suggestion will not be shown to the user.

• In addition to off-topic, harmful, and offensive output filters, Copilot also scans the outputs for vulnerable code.

Yes, Copilot is previewing a code referencing feature as an additional tool to assist users to find and review potentially relevant open source licenses. Code referencing is currently available in Visual Studio Code. This feature searches across public repositories for code that matches a Copilot suggestion. If there’s a match, users will find its information displayed in the Copilot console log, including where the match occurred, any applicable licenses, and a deep link to learn more. The deep link will take users to a navigable page on .com to browse examples of the code match and their repository licenses, and see how many repositories—including ones without licenses—that code appears in, as well as links to those repositories. Copilot users can review this information to determine whether the applicable suggestions are suitable for use, and whether additional measures may be necessary to use them.

We don’t determine whether a suggestion is capable of being owned, but we are clear that does not claim ownership of a suggestion. Whether a suggestion generated by an AI model can be owned depends on many factors (e.g. the intellectual property law in the relevant country, the length of the suggestion, the extent that suggestion is considered ‘functional’ instead of expressive, etc).

• If a suggestion is capable of being owned, our terms are clear: does not claim ownership.

• does not claim ownership of any suggestion. In certain cases, it is possible for Copilot to produce similar suggestions to different users. For example, two unrelated users both starting new files to code the quicksort algorithm in Java will likely get the same suggestion. The possibility of providing similar suggestions to multiple users is a common part of generative AI systems.

Public code may contain insecure coding patterns, bugs, or references to outdated APIs or idioms. When Copilot synthesizes code suggestions based on this data, it can also synthesize code that contains these undesirable patterns. Copilot has filters in place that either block or notify users of insecure code patterns that are detected in Copilot suggestions. These filters target the most common vulnerable coding patterns, including hardcoded credentials, SQL injections, and path injections. Additionally, in recent years we’ve provided tools such as Advanced Security, Actions, Dependabot, and CodeQL to open source projects to help improve code quality. Of course, you should always use Copilot together with good testing and code review practices and security tools, as well as your own judgment.

No. Copilot is a tool intended to make developers more efficient. It’s not intended to replace developers, who should continue to apply the same sorts of safeguards and diligence they would apply with regard to any third-party code of unknown origin.

• The product is called “Copilot” not “Autopilot” and it’s not intended to generate code without oversight. You should use exactly the same sorts of safeguards and diligence with Copilot’s suggestions as you would use with any third-party code.

• Identifying best practices for use of third party code is beyond the scope of this section. That said, whatever practices your organization currently uses – rigorous functionality testing, code scanning, security testing, etc. – you should continue these policies with Copilot’s suggestions. Moreover, you should make sure your code editor or editor does not automatically compile or run generated code before you review it.

Not necessarily. Copilot users should align their use of Copilot with their respective risk tolerances.

• As noted above, Copilot is not intended to replace developers, or their individual skill and judgment, and is not intended to fully automate the process of code development. The same risks that apply to the use of any third-party code apply to the use of Copilot’s suggestions.

• Depending on your particular use case, you should consider implementing the protections discussed above. It is your responsibility to assess what is appropriate for the situation and implement appropriate safeguards.

• You’re entitled to IP indemnification from for the unmodified suggestions when Copilot’s filtering is enabled. If you do elect to enable this feature, the copyright responsibility is ours, not our customers. As part of our ongoing commitment to responsible AI, and Microsoft extends our IP indemnity and protection support to our customers who are empowering their teams with Copilot. See Microsoft's Copilot Copyright Commitment for more details.

We are conducting internal testing of Copilot’s ease of use by developers with disabilities and working to ensure that Copilot is accessible to all developers. Please feel free to share your feedback on Copilot accessibility in our feedback forum.

Copilot includes filters to block offensive language in the prompts and to avoid synthesizing suggestions in sensitive contexts. We continue to work on improving the filter system to more intelligently detect and remove offensive outputs. If you see offensive outputs, please report them directly to [email protected] so that we can improve our safeguards. takes this challenge very seriously and we are committed to addressing it.

Given public sources are predominantly in English, Copilot will likely work less well in scenarios where natural language prompts provided by the developer are not in English and/or are grammatically incorrect. Therefore, non-English speakers might experience a lower quality of service.

Copilot is powered by generative AI models developed by , OpenAI, and Microsoft. It has been trained on natural language text and source code from publicly available sources, including code in public repositories on .

1. Data from June 2023. Additional research can be found here.

2. Feature in public beta for Copilot Pro and Business plans. Requires use of repositories, issues, discussions, Actions, and other features of .

3. Authentication with SAML single sign-on (SSO) available for organizations using Enterprise Cloud.