Important: Microsoft Copilot is an AI and may make mistakes, misinterpret instructions, or be deceived by malicious hidden instructions. Please monitor results closely and review important details, especially for tasks involving payments, personal information, communications with others, or changes to accounts or files. Copilot will ask for your approval or hand control back to you for sensitive actions. Using Copilot means you agree to the Terms of Use. See our Privacy Statement for more information.

How does Copilot Tasks work?

Copilot Tasks allow you to delegate certain tasks or work to Copilot using natural language. Instead of working step by step in a conversation, you describe a goal and Copilot plans and executes the steps needed to complete it. Tasks can be run immediately or scheduled to run later. Copilot may browse the web, navigate and interact with websites, generate or edit files, or use connected services you've authorized (such as email or cloud storage) to deliver a result for your review.

You can manage two types of tasks in Copilot:

  1. Regular tasks run once and begin as soon as you submit your request. Example: “Order pizza for my family tonight.

  2. Scheduled tasks run at a specific time or on a recurring schedule. Example: “Email me a weekly summary of Microsoft stock performance.

All tasks live in the Tasks view in Copilot, where you can review progress, pause or stop tasks, edit schedules, or delete tasks at any time. You can also delete any Tasks stored memory.

For more information on how to change what Copilot remembers about you, read about Copilot Privacy Controls. For browser‑based tasks, Copilot interacts with websites in a human‑like way, such as clicking, scrolling, and typing. You may be able to observe the task as it runs, stop it at any time, or take control when required. Some tasks may complete quickly, while others may take longer depending on complexity. As a task runs, you may see progress updates or intermediate results. Copilot may pause and ask for your input if additional approval or information is needed.

You are always in control of a task in Copilot:

  • You can stop a running task at any time by clicking the interrupt message button.

  • You can pause, turn off, or delete scheduled tasks.

  • Tasks are user initiated and will not start without you specifically asking to start a Task

You can monitor a task by watching its progress in the Tasks view of Copilot. As a task runs, you will see the steps it is taking and any websites or actions involved. If the task starts doing something you did not expect, you can stop it immediately or take control.

Uses and limitations

Copilot Tasks can be useful for everyday activities like research, content creation, scheduling, and managing workflows.

However, because Tasks can act on your behalf, you should be especially cautious with:

  • Payments or financial actions

  • Account or file changes

  • Websites you don’t recognize or trust

  • Actions requiring the advice of a professional: Copilot is not a professional advisor, so you should not rely on it for actions requiring financial, legal, medical, or other advice or judgment.

  • Actions that impact people: Tasks should not be used to make sensitive decisions that impact individuals, such as decisions relating to jobs, loans, insurance, housing, safety.

Copilot Tasks may not work well for some activities, including the following:

  • Highly sensitive or critical activities

  • Advanced document layout or design work

  • Websites that restrict automated interaction

Copilot Tasks should be used in accordance with the Copilot Terms of Use. You are responsible for what Copilot Tasks does on your behalf, and you must adhere to the following:

  • Do not do anything illegal.

  • Do not use the product to avoid responsibility for actions or decisions.

  • Do not access accounts, devices, or data without authorization.

  • Do not upload, collect, use, or share personal information of others without authorization.

  • Do not upload, create, or share content that is harmful.

  • Do not upload, collect, or use private, confidential, or copyrighted information you don’t have the right to use.

  • Do not scam, impersonate, deceive, harass, exploit, or threaten others.

  • Do not create or spread malware, hacking tools, or security attacks.

  • Do not exploit, abuse, spam, manipulate, compromise, or violate the rules of another system or service.

  • Do not try to bypass, override, jailbreak, or otherwise circumvent Copilot or third-party safety or security features, limits, or restrictions, or to authorize actions you would not be allowed to take yourself.

Security and safety considerations

Copilot Tasks uses automation to take actions on your behalf, which can introduce different risks than using general purpose AI tools that help you conduct research or generate content. While Tasks are designed to help you save time and complete multi‑step workflows, they may occasionally make mistakes and may also require user input or oversight. Always review Copilot’s instructions and work carefully. If a task starts accessing websites or files or performing actions you didn’t intend, immediately stop the task and review before continuing.

When is user approval required?

Copilot will ask for your approval or hand control back to you for certain actions to help reduce the risk of unintended outcomes. These include:

  • Monetary transactions, such as completing a purchase or submitting payment

  • Submitting personal information to external websites, such as names, addresses, or phone numbers

  • Actions involving other people, such as sending emails or messages

  • Account‑altering actions, including deleting files, modifying cloud storage, canceling subscriptions, or changing account settings

  • Sensitive actions, such as health‑related submissions, government documents, or security‑related changes

Copilot only submits personal information when you approve an action that sends it to another service or website. For these scenarios, you remain in control and must explicitly approve or complete the action yourself. For scheduled or recurring tasks, Copilot may ask for required approvals during setup so the task can run unattended in the future.

What data Copilot Tasks uses and stores

Copilot may use and store limited data to perform and review tasks:

  • Conversation and task history: Your prompts and Copilot’s responses are saved so you can review past tasks.

  • Screenshots: For browser‑based tasks, Copilot may capture screenshots of pages it interacts with to understand and complete the task. Non-browser tasks do not capture page screenshots. Screenshots are retained for a limited time and are not used for training.

  • Cookies (optional): If you allow it, Copilot may store certain persistent cookies to help you stay signed in across browser‑based tasks. Cookies are encrypted, retained for up to 30 days. You can delete stored cookies or turn this off at any time in your Copilot privacy settings.

  • Task‑specific memory: Copilot may save memory related to tasks (for example, your preferences, or important dates) to help complete future tasks.

You can manage or turn off memory and connected services at any time in your Copilot settings.

You shouldn't provide Tasks with access to any confidential or sensitive personal data that you would not want Tasks to use for performing activities on your behalf. This includes data that might reveal, for example, your race, religion, sexual orientation, or health status Copilot does not store sensitive information such as passwords, credit card numbers, bank account details, or government ID numbers.

What security risks should I be aware of?

Copilot Tasks introduce additional security considerations because they can take actions on your behalf.

  • Unintended actions: Copilot may misunderstand your request or act differently than you expect. Review task outcomes carefully and stop a task if behavior seems unexpected.

  • Prompt injection: Some websites or content may include hidden or misleading instructions intended to manipulate automated systems. You should remain attentive. Monitor the task closely. If Copilot navigates to unexpected sites, requests unfamiliar approvals, or attempts actions you did not intend, pause or cancel the task and review it before proceeding.

  • Financial risks: Tasks involving purchases or payments require your approval. Always confirm details before completing a transaction.

  • Privacy risks: Tasks may interact with websites that request or process personal or sensitive data. Copilot will ask for approval before submitting personal information externally.

Copilot includes safeguards designed to help reduce these risks, but you remain responsible for reviewing and approving important actions taken on your behalf.

Which websites can Copilot Tasks access?

Copilot uses safety and security policies to reduce risk when performing browser‑based actions. While Copilot Tasks can interact with many websites, it does not work with every site. Some categories of sites may require your approval or be blocked entirely based on safety and security policies.

Copilot may ask you to take over if a site restricts automated interaction, requires additional sign-in steps or manual interaction (such as for purchases, bookings, or accessing protected content), or presents other challenges.

Are my interactions used to train models?

Copilot Tasks does not use your interaction data for training unless you have explicitly opted in to data sharing for product improvement. Task logs, screenshots, and outputs are retained only for limited periods to support functionality, safety, and troubleshooting.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.