Is Copilot Actions on Windows safe?

• What data can Copilot Actions on Windows access?

  When the admin-only "Experimental agentic features" setting is on, agents can get read and write access to Documents, Downloads, Desktop, Music, Pictures and Videos, plus folders all authenticated users can reach and apps installed for all users. Per agent, set Files to Allow Always, Ask every time or Never allow (Settings > System > AI Components > Agents); turning the setting off removes folder access. support.microsoft.com · checked Oct 23

• Does Copilot Actions on Windows ask before sending, buying or deleting?

  Yes

  Microsoft’s stated principle: "Users approve all queries for user data as well as actions taken." Full quote

  Microsoft’s stated principle: "Users approve all queries for user data as well as actions taken." By default Windows asks for consent when an agent requests files in the known folders.

  support.microsoft.com · checked Oct 23

• Can Copilot Actions on Windows see my passwords?

  Not published Microsoft does not state this on the pages we checked.

• Does Copilot Actions on Windows use my data to train AI models?

  Not clearly stated Copilot lets you "opt out of using your conversation activity for model training"; no Copilot Actions-specific training statement found. support.microsoft.com · checked Oct 23

• Where does Copilot Actions on Windows run, and is it isolated?

  Agent workspace: a separate Windows session with its own agent account (distinct from yours) and scoped folder access; lighter than a full VM such as Windows Sandbox. support.microsoft.com · checked Oct 23

• How long does Copilot Actions on Windows keep my data?

  Microsoft Copilot stores conversation activity for 18 months by default. You can delete individual chats from the Chats list (...More > Delete) or your whole activity history from the privacy dashboard, and delete saved memories in Settings > Personalization > Manage > Delete all memories. support.microsoft.com · checked Oct 23

• Microsoft warns of cross-prompt injection (XPIA) risks, where malicious content in UI or documents can override agent instructions. support.microsoft.com · checked Oct 23
• Microsoft says agent actions should be observable and distinguishable from the user's, and that you can take over the task or review what actions have been taken at any time. blogs.windows.com · checked Oct 23

Is it safe to let Copilot Actions use my files?

Microsoft runs the agent under its own dedicated agent account in a separate session, with access limited to known or shared folders, and warns about cross-prompt injection risks. Read Microsoft’s security notes before enabling it. support.microsoft.com · checked Oct 23

• Is Gemini tasks (formerly Gemini Agent / Spark) safe? Copilot Actions on Windows vs Gemini tasks (formerly Gemini Agent / Spark)
• Is Siri AI (Apple Intelligence) safe? Copilot Actions on Windows vs Siri AI (Apple Intelligence)
• Is OpenClaw safe? Copilot Actions on Windows vs OpenClaw
• Is ChatGPT Work safe? ChatGPT Work vs Copilot Actions on Windows
• Is Perplexity Computer safe? Copilot Actions on Windows vs Perplexity Computer

All alternatives to Copilot Actions on Windows · Is it safe to connect Gmail to an AI agent? What each vendor says it does · How facts are checked

1. support.microsoft.com/en-us/windows/ai/ai-features/experimental-agentic-features
2. support.microsoft.com/en-us/microsoft-copilot/microsoft-copilot-privacy-controls
3. support.microsoft.com/en-us/microsoft-copilot/privacy-faq-for-microsoft-copilot
4. blogs.windows.com/windows-insider/2025/11/17/copilot-on-windows-copilot-actions-begins-rolling-out-to-windows-insiders/