If your school runs Microsoft 365, Copilot is usually the most straightforward route to safe AI — it sits inside tenancy you already control. Here's what setting it up actually involves.
Why Copilot suits schools
The main advantage isn't capability — it's governance. Copilot operates within your existing Microsoft 365 tenancy, under agreements you already have, with admin controls you already use. For a school weighing data protection questions, that removes a great deal of friction compared with introducing an unrelated third-party tool. See our overview of Copilot for education.
Before you enable anything
- Confirm licensing — which Copilot capabilities your existing plan includes, and what costs extra
- Check age requirements for any pupil-facing use, which differ from staff use
- Involve your DPO and complete a DPIA if required
- Review your tenancy's data hygiene — see the warning below
- Decide the scope — staff only to begin with is the sensible default
The issue schools most often miss: Copilot can surface anything a user already has permission to access. If your SharePoint permissions are loose — an HR folder shared too widely, a safeguarding file inheriting open permissions — Copilot makes that discoverable in seconds rather than by chance. Audit your permissions before rollout, not after. This catches out a lot of schools and it's entirely preventable.
A sensible rollout order
- Audit and fix file permissions across your tenancy
- Enable for a small pilot group — SLT and a few willing staff
- Set admin policies and confirm what's logged and visible
- Train the pilot group, including the data rules
- Gather what actually helps and build your own guidance from it
- Roll out to all staff with training — see what CPD staff need
- Consider pupil use separately, with age and safeguarding checks
Staff rules still apply
Copilot being inside your tenancy makes it safer, not unregulated. Staff still need clear rules about what's appropriate — see staff acceptable use rules — and still need to check output, because Copilot is as capable of confident errors as any other AI.
Where staff get the most from it
In practice: summarising long email threads and documents, drafting communications in Outlook, pulling key points from meetings, and speeding up work in Word. The integration with existing files is the genuine differentiator over a standalone chatbot — it can work with your actual documents rather than requiring copy-paste.
If you're a Google school
The equivalent logic applies to Gemini within Google Workspace, including the permissions warning. See Google Gemini for schools.
Rolling out Copilot this term?
We help schools do it in the right order — permissions first, training included. AskColin gives schools low-cost monthly support with one-to-one help whenever you need it — so when you're stuck on a real job at 8am, there's someone to ask. Practical, jargon-free, built around your team.
Get one-to-one AI support for your schoolFrequently asked questions
How do schools set up Microsoft Copilot?
Confirm what your licensing includes, check age requirements for any pupil use, involve your DPO and complete a DPIA if needed, audit file permissions across your tenancy, then pilot with a small group before rolling out to all staff with training.
What do schools miss when enabling Copilot?
File permissions. Copilot surfaces anything a user already has access to, so loose SharePoint permissions — an HR folder shared too widely, a safeguarding file with inherited access — become instantly discoverable rather than found by chance. Audit permissions before rollout.
Is Microsoft Copilot safer than ChatGPT for schools?
From a governance perspective usually yes, because it operates within your existing Microsoft 365 tenancy under agreements you already hold with admin controls you already use. That removes friction — but staff still need clear rules and still must check output.
What do school staff use Copilot for most?
Summarising long email threads and documents, drafting communications in Outlook, pulling key points from meetings, and speeding up work in Word. The integration with existing files is the real differentiator over a standalone chatbot.