Microsoft 365 Copilot: The Summer AI Stopped Waiting for Orders

With new models, agents that execute entire workflows, and files generated directly within apps, the July 2026 update raises the bar from an “assistant that makes suggestions” to a “colleague that delivers results.”

For two years, we’ve described Copilot as a very skilled proofreader: summarize this email, rewrite this paragraph, fix this slide. The wave of updates that rolled out between June and July 2026 tells a different story. Copilot has started to complete tasks, not just draft them, and this changes the way a company needs to think about and manage it.

Two new models in just one month

In July, Microsoft introduced two new models to Copilot within a matter of weeks. OpenAI’s GPT-5.6, available since July 9, is being rolled out across Word, Excel, PowerPoint, Copilot Chat, and Cowork, and has become the default model—the one Copilot automatically selects when available. Anthropic’s Claude Sonnet 5, available since July 2, is now available in Copilot Cowork and Copilot for PowerPoint, designed for tasks involving multiple steps across documents, spreadsheets, and presentations.

Here’s what tenant administrators need to know: The models managed by OpenAI are controlled at the tenant level and will be enabled for all users of eligible commercial tenants starting July 24, 2026, unless the administrator selects “No users” in the AI provider settings. Access to Claude Sonnet 5 is also managed by the administrator and varies by geographic region. In other words: if you haven’t made a decision, someone else has decided for you.

Cowork, the agent that delivers the finished product

The biggest news isn’t a model but a product. On June 16, Microsoft released Copilot Cowork to the general public—an agent-based system that plans, executes, and delivers: the user defines the task, and Cowork carries it out from start to finish, returning a complete deliverable instead of a draft.

The business context is sourced from Work IQ, so the results reflect the systems and data actually in use. The process runs in the cloud, so files are not stored locally, and activities continue even when the device is turned off. Everything remains within the Microsoft 365 compliance framework, with confidentiality labels inherited, audit logging, and eDiscovery managed through Microsoft Purview.

AI is making its way into files, not just chat

The rest of the updates follow the same trend: less chatting, more output.

• Copilot Notebooks converts notes and references you've collected into a Word document, an Excel spreadsheet, or a PowerPoint presentation, and can create an interactive mind map of the content.
• Agent Mode in PowerPoint creates a presentation based on the user's files, meetings, and emails through Work IQ, using only content to which the user already has access.
• Copilot Chat in Outlook analyzes your entire inbox and calendar—not just a single open thread—and it does so even without the paid add-in.
• Copilot in SharePoint generates Office files and interactive HTML reports with charts and KPIs directly from site content.
• MCP (Model Context Protocol) agents can now be accessed within Word, Excel, PowerPoint, and Outlook on the web, without opening a separate window.

Governance: The Boring Part That Will Save You

Three points that shouldn't be dismissed as mere technical details.

1. Watermarks on AI-generated content. Microsoft 365 can apply a visual or audio watermark to videos and audio files generated or edited using artificial intelligence. This feature is governed by Cloud Policy and remains disabled until an administrator enables it.
2. Inherited confidentiality labels. Files generated by Copilot automatically inherit the highest label found in the source data, and if the application fails to do so, the system flags it before sharing.
3. Agent Security in Microsoft Agent 365. Starting July 1, 2026, discovery, posture, and threat detection for Copilot Studio and Foundry agents will be managed through Microsoft Agent 365, which will directly impact what you see in Microsoft Defender.

What to Do, in Practical Terms

If you manage a Microsoft 365 tenant, here is the minimum checklist for the next two weeks: decide which models to make available to users before automatic enablement does it for you, establish a policy on AI watermarks, verify Agent 365 coverage if you have agents in production, and publish a collection of corporate prompts in the Copilot Prompt Gallery to drive adoption.

The real paradigm shift, however, is cultural. As long as Copilot was just drafting documents, the biggest risk was a sloppy email. Now that it performs tasks that span multiple systems and operates on real data, it has fully entered the realm of business processes—with all that entails in terms of permissions, traceability, and accountability.