Microsoft 365 vs. Copilot: What’s Actually Included

Most owners we talk to assume Copilot is either already included in their Microsoft 365 subscription or a separate product they’d have to switch to. Neither is quite right, and the confusion makes it hard to budget. Microsoft licensing is one of the things we manage day to day as part of managed IT services, and this question now comes up in almost every licence review.

I’m Jeffrey Bowles, Partner and Director of IT Services at ACT360. This guide sets out what Microsoft 365 gives you, what Copilot Chat adds at no extra cost, what the paid licence adds on top, and how to decide who actually needs it.

Microsoft 365 is the subscription that runs your email, Office apps, Teams and file storage. Copilot is an AI assistant that sits on top of it. You can’t buy the paid Copilot licence without a qualifying Microsoft 365 plan underneath.

Think of Microsoft 365 as the building and Copilot as a new employee who works inside it. The building has to exist first. What the employee can do depends on which badge you give them: Copilot Chat gets into the lobby, the paid licence gets into the filing rooms.

That matters for budgeting. Copilot doesn’t replace any part of Microsoft 365, so it’s always an added cost per person, never a swap. Microsoft says plainly on its Copilot pricing page that the Microsoft 365 Copilot add-on requires a separate licence for a qualifying Microsoft 365 plan.

Copilot Chat is included for users with an eligible Microsoft 365 subscription. It offers secure, web-grounded AI chat, works with files you upload, and appears in Outlook and some Office apps, with enterprise data protection.

According to Microsoft’s comparison of Copilot Chat with and without a licence, the included version gives you:

• Web-grounded answers. Good for research, explanations and first drafts.
• Limited work data. It works with files you upload into the chat, not with your mailbox, calendar or SharePoint on its own.
• Copilot in Outlook, and in other Microsoft 365 apps depending on your licence. Microsoft notes availability in Word, Excel, PowerPoint and OneNote varies by market and licensing.
• Standard access to the AI models, which Microsoft says may be limited at peak times.
• Limited agents. Agent usage is metered (pay-as-you-go) and requires an Azure subscription.

The part people miss is that Copilot Chat, used with a work account, comes with enterprise data protection. That’s a real step up from staff pasting client details into a personal AI account, which is exactly what the Canadian Centre for Cyber Security’s guidance on generative AI warns against.

The paid licence connects Copilot to your work data: email, meetings, chats and files. It also puts Copilot inside Word, Excel, PowerPoint, Outlook and Teams, and includes advanced agents such as Researcher and Analyst.

In practice, the difference shows up in questions like these:

• “Summarize what was decided in this morning’s Teams meeting and list who owns each follow-up.”
• “Find the latest version of the Henderson proposal and draft a reply to their questions.”
• “Pull last quarter’s numbers from this spreadsheet and explain the three biggest changes.”

Copilot Chat can’t answer the first two without someone copying the content in by hand. The licensed version can, because it searches what that person already has access to. It also gets priority access to the models, Copilot Studio included for building agents, and pre-built agents Microsoft calls Researcher and Analyst. If you’re curious about agents specifically, our piece on what custom Copilot agents can realistically do today goes further, and how Copilot is changing business meetings covers the Teams side.

The short version: Microsoft 365 runs the work, Copilot Chat helps with general AI tasks, and the paid licence lets AI work with your own business content inside the apps your team already uses.

Feature details come from Microsoft’s own pricing and support pages as of October 2026. Microsoft changes Copilot packaging often, so check the current pages before you sign anything.

Microsoft lists Copilot Business at US$21 per user per month for organizations with up to 300 users, currently promoted at US$18 for the first year on annual terms. The enterprise Microsoft 365 Copilot add-on lists at US$30.

A few details from Microsoft’s Copilot for business pricing page are worth knowing before you budget:

• The promotion has an end date. The US$18 price runs from July 1 to December 31, 2026, applies to the first year only, and needs an annual commitment.
• Monthly billing costs more. Microsoft lists US$25.20 per user per month for Copilot Business on monthly terms.
• Some features are billed by usage. Certain advanced AI features and agent usage are metered beyond the licence fee.
• Bundles exist. Microsoft also sells Business Standard and Business Premium with Copilot included, which can be simpler than adding the licence separately.

Copilot Business itself launched at the lower business price on December 1, 2025, as Computerworld reported at the time, aimed at organizations with 300 or fewer employees. These are U.S. list prices. Canadian pricing is set separately and changes, so get the CAD figure for your plan before you multiply it by headcount.

For context on how we bill this: at ACT360, Microsoft licensing is billed separately from our managed IT fee, so you see exactly what you’re paying Microsoft and what you’re paying us.

Because Copilot shows people everything they already have access to, including files that were shared too broadly years ago. Copilot doesn’t create the exposure. It makes existing oversharing easy to find.

Microsoft is direct about this in its SharePoint guidance for Copilot: Copilot “only surfaces organizational data to which individual users have at least view permissions,” and users may experience it “as exposing content that was overshared.”

In a 30-person company that grew quickly, the usual suspects are a finance folder shared with “everyone,” an old HR site nobody closed, and sharing links set to anyone in the organization by default. Before licensing anyone, we’d check:

1. Which SharePoint sites and Teams are shared with the whole company.
2. Whether default sharing links go to specific people or to everyone.
3. Inactive sites that still hold sensitive files.
4. Who owns each site and can approve access.
5. That multi-factor authentication is on for every account, because Copilot makes a compromised account more useful to an attacker.

None of this is new work created by AI. It’s housekeeping that was always worth doing. Copilot just raises the cost of skipping it. Our article on what to fix before you invest in AI covers the wider foundations.

Start with the people whose day is mostly email, meetings, documents and spreadsheets: owners, managers, coordinators, estimators and finance staff. People who rarely work in Microsoft 365 apps usually get enough from Copilot Chat.

A practical way to decide:

• Strong candidates: someone who sits in several Teams meetings a day, writes proposals or reports every week, or spends hours reconciling spreadsheets.
• Maybe later: staff who write occasionally and mostly need help with wording. Copilot Chat covers a lot of this.
• Probably not: shop floor, field and front-desk roles that rarely open Word or Excel.

Then treat it like any other pilot. Pick a handful of people, agree on what you’re measuring (time on meeting notes, time to a first draft, time on a monthly report), give it four to eight weeks, and compare. If the numbers move, expand. If they don’t, you’ve spent a few licences finding out instead of a whole company’s worth. That’s the same order we recommend in where to actually start with AI automation.

We treat Copilot as a licence decision tied to a business outcome, not a feature to switch on. When we manage a client’s Microsoft 365 environment, we already know which plan they’re on, how their files are shared and who works where, so the conversation starts with the people and the work rather than a price sheet.

Our usual order is to tighten sharing and security, license a small group, measure, and only then talk about agents or wider automation through our AI automation services. Staying on Copilot Chat for most of the team is a perfectly reasonable answer. So is deciding the paid licence pays for itself in one department and nowhere else. If you want the governance side in more depth, see how to use AI without increasing risk.

The Microsoft 365 vs. Copilot question is really two questions. Do your people need AI help at all? Copilot Chat answers that for free. Do some of them need AI that works with their own email, files and meetings? That’s what the licence buys, and it’s worth paying for only where the time savings are real and the file permissions are clean.

If you’d like a second opinion on your setup, our free IT Readiness Assessment looks at your current Microsoft 365 plan, sharing and security before any licence recommendation. You can also call 705-739-2281 or email [email protected].