M

Microsoft Copilot EU AI Act Compliance Profile

Microsoft

Risk Classification
LIMITED RISK
Art. 50, 52
Limited Risk AI System
Model Info
Provider Info
ProviderMicrosoft
Categorychatbot
Obligations
3apply
~16h effort
Ensure AI Literacy of Staff
Notify Individuals of Emotion Recognition / Biometric Categorization
Label Deep Fakes and AI-Generated Content for Public
$ npx complior scan

Your risk depends on how you use Microsoft Copilot

Usage ContextRisk LevelObligations
Internal coding toolMINIMAL3 obligations (~12h)
Customer support botLIMITED7 obligations (~32h)
HR screening / hiringHIGH19 obligations (~120h)
Credit decisionsHIGH19 obligations (~120h)
Medical triageHIGH19 obligations (~120h)

Why this tool is classified as LIMITED RISK

AI assistant integrated into Microsoft 365 apps for productivity, search, and content generation.

Applicable Articles

Article 4Ensure AI Literacy of Staff
REQUIREDDEADLINE PASSED
Obligation under Article 4 for Microsoft Copilot deployers.
Article 50(3)Notify Individuals of Emotion Recognition / Biometric Categorization
REQUIREDDEADLINE PASSED
Article 50(4)Label Deep Fakes and AI-Generated Content for Public
REQUIREDDEADLINE PASSED
Article 50(1)Disclose AI Interaction to Users — Chatbot/Assistant
PROVIDER: Microsoft
Article 50(2)Mark AI-Generated Content — Machine-Readable
PROVIDER: Microsoft

Who does what

Microsoft (provider)Their job

  • Ensure AI Literacy of Staff (Article 4)
  • Disclose AI Interaction to Users — Chatbot/Assistant (Article 50(1))
  • Mark AI-Generated Content — Machine-Readable (Article 50(2))
  • Mark AI-Generated Images — C2PA/Watermark (Article 50(2))

You (deployer)Your job

  • Ensure AI Literacy of Staff (Article 4)
  • Notify Individuals of Emotion Recognition / Biometric Categorization (Article 50(3))
  • Label Deep Fakes and AI-Generated Content for Public (Article 50(4))
See full obligation checklist

Risk Assessment Reasoning

Microsoft Copilot subject to Article 50 transparency obligations. Users must be informed of AI interaction and generated content must be marked.

Similar Models

Frequently Asked Questions

What is Microsoft Copilot's EU AI Act risk classification?

+

Microsoft Copilot is classified as LIMITED RISK under the EU AI Act.

What are my obligations if I deploy Microsoft Copilot?

+

As a Microsoft Copilot deployer, you have 3 base obligations (~16 hours estimated effort). Key articles: Article 4, Article 50(3), Article 50(4).

What is Microsoft Copilot?

+

Microsoft Copilot is a Unknown model. It has 0 downloads on HuggingFace.

What are the EU AI Act deadlines for Microsoft Copilot?

+

Already passed: Ensure AI Literacy of Staff — 2025-02-02. Already passed: Notify Individuals of Emotion Recognition / Biometric Categorization — 2026-08-02. Already passed: Label Deep Fakes and AI-Generated Content for Public — 2026-08-02.

Check Microsoft Copilot compliance in your codebase

One command to scan. Open-source CLI.

$ npx complior scan