The short version

Microsoft offers Business Standard and Business Premium with Copilot alongside its base business plans. Eligible organisations can also add Copilot Business to an existing plan. We compare the current licensing routes, permissions and governance requirements before rollout. Microsoft publishes the routes and its current rates on the Microsoft 365 Copilot pricing pages (opens in new tab).

Licensing routes were checked on 13 September 2026 against Microsoft’s July 2026 announcement (opens in new tab). Promotional eligibility, billing terms and UK prices can change. We confirm the current proposal in writing before an order.

  • Copilot now comes inside some plans, but the base plans and the add-on route both continue.
  • The new paid bundles do not automatically migrate an existing base subscription. Included Copilot Chat features and their rollout are a separate matter.
  • Plan the licence and the access, data and usage controls together.

What actually changed

Before July 2026, Copilot for work was something you added on top of a Microsoft 365 plan and paid for per user. That route still exists. What changed is that Microsoft also made Business Standard with Copilot and Business Premium with Copilot permanent plans for small and mid-sized organisations, so the licence can now sit inside the plan rather than only on top of it.

Copilot Chat is included at no extra licence cost for eligible work accounts, with enterprise data protection. It can use content you provide and, in supported experiences, additional work context or agents. Paid Copilot adds broader licensed capabilities; some agents introduce consumption charges. Compare the exact features and account type rather than assuming Chat can never use business data. Business Standard with Copilot and Business Premium with Copilot bundle paid capabilities with the base subscription. Ordinary Business Premium and Business Premium with Copilot remain distinct offers.

The July bundle announcement does not automatically move an existing base subscription onto a new paid plan. Check separately which Copilot Chat features are included or being deployed in your tenant, and use admin controls appropriate to your organisation’s policy. Renewal is a useful point to compare the paid routes.

Microsoft’s Copilot Chat privacy documentation (opens in new tab) explains the included experience and the situations in which it can use organisational content. Microsoft now also uses the shorter “Microsoft Copilot” product name; this guide concerns the commercial Microsoft 365 work-account offers.

Why Microsoft did it

Microsoft describes the launch as turning earlier promotional bundles into permanent offers. For a buyer, the practical effect is another purchasing route to compare. A bundle is useful only when its applications, security features, seat count and commitment fit the business.

What it means for your business

Copilot can make existing business information easier to find and summarise. Its access to Microsoft 365 content follows the user’s permissions, so overly broad sharing can expose information to people who technically have access but should not. Review permissions, sensitive information, web search and approved agents before a wider rollout.

For a regulated firm, finance business or defence supplier, check contractual data handling and processing-location requirements as well as permissions. Review outputs before relying on them for important decisions. Access cleanup is valuable, but it does not remove every AI or data protection risk.

What to do now

You can take this at your own pace. Use the time to get ready rather than to react.

  • Check your sharing and permissions. Find where files and sites are open far too widely and tighten them before Copilot can surface them.
  • Label and protect sensitive content. Configure and test supported sensitivity labels, encryption and DLP controls. Coverage depends on licences, applications and policy configuration; labels do not automatically protect every generated answer.
  • Harden identity. Multi factor authentication and conditional access matter more once an AI assistant inherits each account's reach.
  • Write a short AI acceptable use policy. It tells staff what Copilot is and is not for, and it can be handed over when an assessor asks to see it.
  • Choose the licence route deliberately. Decide whether the Copilot Business add-on for the people who need it, or a plan with Copilot included, fits your team better. We advise on the routes and the eligibility, and we confirm current UK pricing in writing before anything is ordered.

None of this is exotic, and most businesses have a gap in at least one area. A short readiness assessment finds them before they become a problem. That is exactly what our Microsoft Copilot readiness and governance service is for, and it sits alongside the Microsoft 365 support we already run for clients. If your worry is staff using public AI tools in the meantime, our guide on stopping data leaks to AI covers the interim controls.

FAQ

Common questions

When did the Copilot licensing change take effect?

The permanent Business Standard with Copilot and Business Premium with Copilot subscriptions became available on 1 July 2026. The add-on route continued. This announcement does not automatically migrate an existing base subscription; Copilot Chat availability is a separate product and administration question.

Will my Microsoft 365 bill go up?

A paid Copilot purchase can add cost, but base-plan price changes, renewal terms, currency or promotional expiry can also change the bill independently. Compare the complete current quote and renewal terms; staying on a base plan does not guarantee an unchanged Microsoft 365 bill.

Do we have to use Copilot?

You do not have to buy a paid Copilot bundle or add-on. Copilot Chat may already be included for eligible accounts, so review its availability and admin controls separately. Set approved uses and access rules before deciding which people need paid capabilities.

Is Copilot safe for a regulated business?

It can be suitable after a review of the use case, data, permissions, processing terms and applicable contractual or regulatory requirements. No configuration makes every use safe. See whether Microsoft Copilot is safe for business and our governed Copilot adoption service.