The new DLP policies introduced in Copilot Studio allow customers to manage Generative AI sources more effectively. Unlike the previous 'everything ON' or 'everything OFF' approach at the tenant level, these policies enable control at the DLP policy level, which is the environment level. This means you can specify whether Custom Copilots can access knowledge sources like SharePoint, public websites, or documents uploaded through the document upload feature.

To control Generative Answers sources in Copilot Studio using DLP policies, you can now set policies at the environment level to decide if your Custom Copilots are allowed to use specific knowledge sources. These sources include SharePoint, public websites, or documents that are uploaded directly. By setting these DLP policies, you can fine-tune the information that your Generative AI can draw from to provide answers.

The bonus DLP policy add-on for Copilot Studio is the option to decide if your Copilot can be connected to Application Insights. This add-on enhances governance by providing better control over data export, allowing you to monitor and manage how your Copilot interacts with Application Insights.