Quick fix: try it safely in 5 steps
- Ask whoever manages your Microsoft 365 account whether Cowork is enabled and how it is billed (access and cost).
- Open Microsoft Copilot, choose Cowork, and start with a draft-only task such as an inbox summary.
- Read every preview before you click Send, Post or Create (approvals).
- Keep client and patient data out of prompts until you have a written rule (security).
- Run a 30-day pilot with the checklist.
What Copilot Cowork is, in plain language
Copilot Cowork is a mode inside Microsoft Copilot that does multi-step work for you instead of only answering questions. According to Microsoft's own documentation, you describe what you need, and Cowork sends emails, schedules meetings, creates documents, posts in Teams and manages your calendar. You approve each important action before it happens. That last sentence matters more than any other, and we will come back to it several times in this guide.
Think of the difference between asking a colleague "what should I say to this client?" and handing a colleague the whole job: "read the thread, draft the reply, put a follow-up meeting in my calendar and save the quote as a PDF." The first is a chat. The second is delegation. Cowork is Microsoft's attempt to make the second experience work inside Microsoft 365, with your own mailbox, calendar, OneDrive and SharePoint files as the raw material.
This guide is written for owners and office managers of small businesses, including contractors, clinics, accountants, shops and trades, who keep hearing the name and want to know four things: what it really does, what it costs and who can switch it on, what can go wrong, and whether it is worth trying. It is also written for ordinary people on a personal Microsoft account, because Microsoft says Cowork exists there too, in a more limited way. IT Cares is an independent IT support company. We are not affiliated with, endorsed by or sponsored by Microsoft, and everything below is checked against Microsoft's public pages, which we list at the end.
Three things to know before you read further
- It acts, it does not only talk. Cowork can send real emails and post real Teams messages. Treat it like a new assistant on their first week: useful, fast, and in need of supervision.
- Work accounts and personal accounts differ. Per Microsoft, Cowork for work or school accounts is generally available, and Cowork for personal accounts is in preview.
- Your administrator may have to switch it on and pay for it. For organizations, access is controlled through usage-based billing, not a simple checkbox. More on that in the cost section.
Where you open it
Microsoft says you can use Cowork in your browser at copilot.cloud.microsoft, in the Microsoft Copilot desktop app for Windows and macOS, and in the Microsoft Copilot mobile app for iPhone and Android. In the app you pick Cowork instead of regular chat, type your request (Microsoft documents a limit of 250,000 characters per message, far more than you will ever need), optionally attach files, and send it. Cowork then breaks the request into steps and works through them while you watch.
If your organization is enrolled in Microsoft's Frontier preview program, the navigation may look slightly different, with a Chat and Cowork toggle in the conversation box. Microsoft notes this on its overview page, and it is a reminder that the product is evolving quickly. Screens and menu names may have changed by the time you read this, so treat our descriptions as a map, not a screenshot.
A word on names, models and who is behind it
You will see Cowork described in the press as "built with Anthropic" or "powered by Claude". The detail that Microsoft itself documents is more specific: Cowork can use Anthropic Claude models as a subprocessor for most reasoning, drafting and tool-using work, and it uses a ChatGPT image model for image generation. The model picker defaults to Auto, and Microsoft's model page lists models from several providers, with availability depending on how your organization is configured. In plain terms: you do not need to choose a model, and a business administrator can turn the Anthropic family off.
Why does that matter to a small business? Because it is a data-handling question. Where your prompts and files go, and under which contract, is something a responsible owner should know. We cover it properly in the security section below, and our general guide to AI agents and their security risks explains why "an AI that can act" deserves more care than "an AI that can chat".
Copilot Chat versus Cowork: which one for which job
Microsoft draws the line itself in its FAQ, and the table below summarizes it in our words. If you already use Copilot Chat for quick drafting, nothing changes: Cowork is an additional option, not a replacement. If you want the broader picture of Copilot in a business setting, start with our Microsoft Copilot for business guide.
| Question | Copilot Chat | Copilot Cowork |
|---|---|---|
| What it is | Always-on AI for drafting, summarizing, answering questions | Agentic AI that completes multi-step work across Microsoft 365 |
| Best for | Fast, focused, single-task help | End-to-end work across several apps |
| Typical speed (per Microsoft) | Seconds to minutes | Minutes to hours, with autonomous execution |
| Who does the final action | You copy the result and send it yourself | Cowork can send, post or schedule, after you approve |
| Typical use | A quick draft, an answer, a summary | Inbox and calendar clean-up, meeting preparation, a project launch pack |
| Riskiest mistake | A wrong answer you notice before using it | A wrong action you approve without reading |
The last row is ours, not Microsoft's, but it is the honest summary. A chatbot's mistake sits on screen until you decide to use it. An agent's mistake can leave the building as an email. That is why the approval step exists, and why we recommend never clicking it on autopilot.
What Cowork can actually do (and what it cannot)
Everything in this section comes from Microsoft's Cowork overview, FAQ and "Use Cowork" pages, last updated in early November 2026. We group it by the kind of office chore it replaces, because that is how a small business thinks.
Email and Teams
- Draft, reply to, forward and send messages through Outlook.
- Manage your inbox by sorting emails into folders, deleting emails and responding inline.
- Create and send HTML newsletters by email.
- Post in Teams channels or send direct messages in one-to-one or group chats.
- Prepare stakeholder communications such as status updates, announcements and follow-ups.
For a ten-person company, "sort my inbox" and "draft replies to everything that needs one" is the feature that sells itself. It is also the feature that most deserves a careful first week, because deleting and sending are exactly the actions you want to watch.
Calendar and meetings
- Create events from natural language, for example "set up a 30-minute check-in with Alex tomorrow at 2 PM", which is Microsoft's own example.
- Move events around or clean up conflicts by declining meetings, optionally with a message to the organizer explaining why.
- Prepare meeting intelligence and insights ahead of upcoming sessions.
- Produce a daily briefing that highlights what is ahead.
Documents and files
- Create Word documents, Excel spreadsheets, PowerPoint presentations and PDFs from scratch.
- Edit existing Word, Excel and PowerPoint files stored in OneDrive or SharePoint. Microsoft says the changes are saved to the same shared file and that version history stays available if you need to go back.
- Create SharePoint and OneDrive folders and reorganize existing files.
- Read OneNote pages and, where editing is available, update notes or add pages to existing sections. It cannot create notebooks or sections.
- Accept attachments of many types (Office files, PDFs, images, text, audio, video, archives), with each attached file limited to under 200 MB.
Two limits are worth underlining because they surprise people. Microsoft states that Cowork cannot access or edit files stored locally on your device, since it works with files in OneDrive and SharePoint. It also cannot delete files or folders in OneDrive or SharePoint. If your business still keeps its working files on one desktop in a folder called "Final_v7", Cowork will not help until those files live in the cloud. That is a setup job, and a good one to do anyway for backup reasons, as we explain in our guide to securing business email and files in Microsoft 365 and Google Workspace.
Research, scheduling and automation
- Search your organization for documents, messages and information, limited to what your own account can already see.
- Deep research that pulls from multiple sources into a longer report.
- Scheduled prompts: "Send me a daily briefing every morning at 9 AM" is Microsoft's example. You can create up to 25 scheduled prompts.
- Event-driven tasks that run when a matching email arrives or a Teams message is posted, including when you are @mentioned. Microsoft says these default to draft-and-approve, meaning Cowork prepares the action and waits for your go-ahead.
- Web tasks in Microsoft Edge on your device, using sites you are already signed in to. Your credentials and cookies stay on your device, and Cowork hands the browser back to you at a step it cannot complete on its own, such as a sign-in challenge.
- Image generation through a built-in skill.
Event-driven tasks and browser use are the two capabilities that deserve the most caution in a small business. A trigger like "whenever a supplier emails me, summarize it and draft a reply" is powerful, and Microsoft's own safeguards (draft-and-approve by default, rate limits, loop protection) are reassuring. But the owner is still the safeguard of last resort. We look at the browser question in more depth in our article on AI browser agents and their security risks.
Skills, plugins and custom instructions
Cowork loads specialized "skills" as it works, shown as chips in a side panel. Microsoft lists built-in skills for Word, Excel, PowerPoint, PDF, Email, Scheduling, Calendar Management, Meetings, Daily Briefing, Enterprise Search, Communications, Deep Research and Adaptive Cards, plus an App skill that is labeled Frontier (preview). You can add your own skills by placing a SKILL.md file in a folder in your OneDrive, up to 50 custom skills, and you can write personal custom instructions (tone, formatting, scheduling rules) of up to 20 KB that apply to every task.
Cowork also supports plugins from the Microsoft 365 App Store that add skills and connectors. Microsoft lists role-based plugins such as Accounting for Cowork (Frontier Public), Finance for Cowork and Capital Markets for Cowork. Microsoft is explicit that custom skills written by users are not validated by Microsoft, and that plugin quality depends on the publisher. For a small business the practical rule is simple: install nothing you would not install on a company laptop, and tell whoever manages your IT before you do it. Our shadow AI guide explains how unapproved tools sneak into a company.
What it is not designed for
Microsoft says Cowork is designed for information workers who want to delegate multi-step tasks, and that it is not intended for use cases that require guaranteed accuracy without human review, with legal filings, medical decisions and financial transactions that bypass approval processes given as examples. Its documented limitations also include misreading ambiguous or overly broad instructions, producing inaccurate information when your own source data is incomplete or outdated, and not always completing complex tasks with many dependencies. It cannot read encrypted files unless you hold the right usage rights. Microsoft's advice is to treat generated documents and messages as drafts.
That list is not a reason to avoid the tool. It is a reason to use it for the right jobs: repetitive, reviewable, low-stakes office work where a human glance is enough to catch an error.

How a Cowork session works, step by step
Microsoft describes a typical interaction in five stages. We have added what a careful user should do at each one.
- Describe the task. Give the outcome, the people involved, and the format. "Send a meeting recap to my team" works, but "Send a recap of today's 3 p.m. meeting to the four project members, bullet points, action items first, no attachments" works better. Microsoft's own guidance on limitations is to include details about recipients, formatting and expected outcomes.
- Watch it work. Cowork breaks the request into steps and shows them in the session with updates such as "Composing your email" or "Searching OneDrive". A side panel shows progress, input files, output files, loaded skills, schedules and permissions you have granted.
- Interrupt, steer or pause. You can send another message while it is busy and it will queue it. Pause comes in two kinds: a soft pause that finishes the current step first, and a hard pause that stops immediately. Cancel ends the task.
- Approve actions when asked. Before something sensitive, such as sending an email or scheduling a meeting, Cowork pauses and asks. Medium and high risk actions show a risk indicator. For email and Teams messages you see a preview of the content.
- Review the results. Download the files, check what was sent, and ask for changes. Files Cowork creates land in your OneDrive and SharePoint workspace, and you can download several files at once as a single ZIP.
The approval button, and why you should not train yourself to ignore it
The approval dialog has a main action button (Send, Post, Create), a dropdown that lets you approve and skip the prompt for similar actions during the current session, and Cancel. There is also a "Show parameters" option that exposes the technical details of the action. For emails and Teams messages, the dropdown lets you choose how broad the skip should be, for example only for one recipient, only for one domain, or always for that action in that session.
Our advice, as the people who clean up after mistakes: never choose "always" for email to external recipients, especially in the first month. Allow "don't ask again" for harmless internal steps if you wish, and review what you have allowed in the Permissions section of the side panel. Microsoft says these choices apply only to the current session, which is a sensible design, but a busy owner can still approve a draft containing the wrong attachment. The preview is there to be read.
Seven prompt habits that prevent most mistakes
- Name the recipients. "Email the client" is ambiguous when you have six clients. Use a name and a company.
- Say "draft, do not send" at first. You can ask Cowork to prepare an email and wait. Then you send after reading.
- Give the format. Length, tone, language (English or French, which matters in Quebec), and the file type you want.
- Point to the files. Attach the exact file from OneDrive or SharePoint instead of describing it, and use the file picker or the "/" reference so Cowork does not guess.
- Break huge jobs up. "Reorganize all my files" is a bad first task. "Reorganize the 2026 Quotes folder by client" is a good one.
- State what must not happen. "Do not email anyone outside our company" is a valid instruction, though not a technical guarantee, so keep reading previews.
- Use the Preferences tab. Microsoft lets you save custom instructions about tone, document formatting and scheduling rules that apply to every task, up to 20 KB.

Who can use it, and what it costs
This is the section where most online summaries are out of date, because Cowork started as a limited preview and has since changed how access works. We rely on Microsoft's current admin pages, updated in November 2026, and flag what we could not confirm.
For organizations (work or school accounts)
Microsoft says Cowork is generally available for work or school accounts and uses a usage-based billing model: your organization is charged based on how much users do with Cowork. Activities such as model responses, tool and skill calls, image generation and browser tasks count toward consumption. Administrators can see consumption in the Microsoft 365 admin center and set limits per user or group.
Access itself is granted in an unusual way. Microsoft's access-control page states that a spending policy is an access control, not only a budget. Any user within the scope of a spending policy that selects Cowork can use it, regardless of how small the credit limit is. To remove access, you remove the user from every spending policy that includes Cowork. The older preview-era control, the Cowork agent entry under Agents in the admin center, no longer decides who can use it.
Two further details from Microsoft are useful for owners. First, credit limits are a spending safeguard, not a real-time gate: consumption and limits are evaluated asynchronously, so a user may start a task or two after reaching the limit. Second, if an admin makes Cowork discoverable but does not enable usage-based billing, end users can request access in the app and the admin reviews the request.
What we could not confirm from a primary source: the price of a credit, how many credits a typical task consumes, and whether a separate Microsoft 365 Copilot license is also required for your plan. Microsoft's product page links to pricing and a Copilot Credit Estimator but publishes no specific price on the pages we read. Some trade articles say a Copilot license is needed; Microsoft's current admin pages describe access through spending policies. Check your own admin center and your Microsoft partner rather than relying on a blog, including ours.
For personal Microsoft accounts
Microsoft says Cowork is available for personal and work or school accounts with similar features, with the personal version in preview. Its support page says to sign in with a personal Microsoft account that has an eligible Microsoft 365 subscription, and it does not define "eligible" on the page we read. It mentions Personal, Family, Premium and Pro licenses in a related section about Copilot Tasks moving to Cowork. Personal accounts can create and edit Word, Excel, PowerPoint and PDF files, draft and send email, manage the calendar, manage files in OneDrive, research topics and run scheduled prompts. Teams, organization-wide search and SharePoint are for work or school accounts only.
Because it is a preview, behavior and availability may change. If you are a freelancer or sole proprietor on a personal account, treat it as something to try on low-stakes tasks, not something to build your billing on.
Regions and the EU
Microsoft says access to Anthropic models through its services is limited to the regions Anthropic currently supports, and that Cowork is not an exception. For organizations inside the EU Data Boundary, Microsoft says only GPT models are supported, and its Anthropic page says Claude models are disabled by default for customers in the EU, EFTA and the UK. We could not find a statement on that page about Canada specifically, so a Canadian business should confirm availability in its own admin center.
Three realistic scenarios for a small business
These are realistic scenarios (illustrative), not real client cases. The numbers are our own planning estimates to show how to think about the time saved and the risk, not measured results, and not claims about what Cowork will deliver for you. The capabilities used in each one are all documented by Microsoft, as covered above.
Scenario 1: A 12-person renovation contractor
The situation. The office manager spends about 6 hours a week chasing supplier quotes, rescheduling site visits and writing the Friday status email to clients. Files are in SharePoint, email is Outlook, scheduling is a shared Microsoft 365 calendar.
How Cowork could help. She asks: "Summarize every email this week from our three lumber suppliers into one Excel sheet with columns supplier, item, quoted price, delivery date. Then draft, but do not send, a Friday update to each client with their project status." Cowork reads only mail she can already see, creates the spreadsheet in OneDrive, and drafts the updates for her review. A recurring scheduled prompt can repeat it every Friday at a set time, which Microsoft documents as supported.
The numbers (illustrative). If this cuts 2 of those 6 hours, that is about 100 hours over a working year. Even if the real saving is half of that, the main risk is not time. It is a wrong price copied into a client email. The control is simple: she reads every draft before approving, and the spreadsheet cites the source email for each row.
Why it matters for marketing too. Contractors who get their back office under control have more time for the part that brings in work. If you want to look at that side, Lead4Pro, a Quebec marketing agency, describes AI automation for Quebec small businesses and contractors on its site. We mention it as one outside option for lead generation and follow-up automation, and we make no claims about results.
Scenario 2: A three-person physiotherapy clinic
The situation. The owner wants a daily briefing and a cleaner calendar, but patient information is sensitive and she is worried about privacy.
How Cowork could help, and where she should stop. A daily briefing of "what is on my calendar and which emails need a reply" is a low-risk use. She should not ask Cowork to summarize patient files or paste health details into prompts until she has checked her obligations under Quebec's private sector privacy law and her professional order's rules. Our privacy impact assessment guide shows the questions to ask before putting personal information into any AI tool. Microsoft's pages say Cowork inherits the user's permissions and that sensitivity labels flow through to outputs, but a label only protects data you have actually labeled.
The numbers (illustrative). A 10-minute morning briefing replaced by a 2-minute read saves roughly 8 minutes a day, around 30 hours a year. The cost of getting privacy wrong is far larger than that saving, which is why the clinic starts with calendar and email triage only.
Scenario 3: A solo bookkeeper on a personal Microsoft account
The situation. She works alone, uses a personal Microsoft 365 subscription, and wants help preparing monthly summary documents for four clients.
How Cowork could help. On a personal account, Microsoft says Cowork can create and edit Word, Excel, PowerPoint and PDF files, draft email and manage OneDrive files, but it is in preview. She could test it on a dummy client folder first: "Create a one-page monthly summary template in Word from this spreadsheet." Real client ledgers stay out of it until she understands where her data goes and what her professional obligations are.
The numbers (illustrative). If a template that took 40 minutes takes 10, and she builds four of them, that is about 2 hours saved once. The lesson is not the saving. It is that a preview product on a personal account is a sandbox for learning, not a production system.
What the three scenarios have in common
- Each starts with read-only or draft-only work before anything is sent.
- Each keeps sensitive data out until the owner understands the rules.
- Each keeps a human reading the preview before the approve button.
- None relies on a number Microsoft has not published. The savings are our estimates, and your own pilot is the only measurement that counts.
Security and privacy: what to check before you switch it on
An AI that can act on your behalf is a new kind of risk surface. Here is what Microsoft documents, followed by what we would check as an independent IT provider.
What Microsoft says about data handling
- Your permissions, nothing more. Cowork inherits your permissions, so it can access only the files and emails you can already access. A file or email with a sensitivity label shows that label, and the session displays the highest sensitivity label involved.
- Temporary, isolated processing. When Cowork runs a task, it processes your files in a temporary, isolated environment inside the Microsoft 365 service boundary, uses them only for the duration of the task, and removes the environment afterward.
- No training on your data. Microsoft's responsible AI FAQ states that Cowork does not use your data to train AI models, and that data remains within Microsoft 365 and subject to your organization's data governance policies.
- Auditability. Actions are recorded in the unified audit log, including browser tasks and automated tasks, and Microsoft Purview policies apply.
- Approvals. Sensitive actions need your explicit consent, and Cowork does not bypass site terms of service, impersonate you when interacting with another person, or perform irreversible actions without approval.
Models and data retention: the detail owners miss
Cowork can route work to different AI models. Microsoft's pages say Anthropic Claude models operate as a Microsoft subprocessor, governed by Microsoft's Product Terms and Data Protection Addendum, unless a model is labeled "Anthropic models with Data Retention." Those retention models are off by default, need an administrator to opt in, and fall under Anthropic's own terms. Microsoft's page states that, for those models, Anthropic stores most inputs and outputs for up to 30 days, with longer retention possible if its safety classifiers flag potential policy violations. Cowork shows a note in the model picker and a banner when such a model is selected.
The takeaway is practical. Leave the picker on Auto unless you have a reason not to. If a business owner sees a banner about data retention, that is a decision for the person who signed your Microsoft agreement, not for each employee. If you hold client data under confidentiality terms, ask your IT provider which models are enabled before you allow them.
The risks Microsoft cannot remove for you
- Prompt injection. Microsoft's support page for the personal version warns that Copilot "may make mistakes, misinterpret instructions, or be deceived by malicious hidden instructions." In practice that means an email, web page or document that contains hidden instructions could try to steer an AI agent. This is the main reason to keep approvals on for anything that sends, shares or deletes.
- Over-permissioned files. Because Cowork sees what you can see, a messy SharePoint where everyone can open everything is a bigger problem with an agent than without one. Clean up sharing before you scale usage.
- Convenience creep. "Always allow" prompts, event-driven triggers and scheduled tasks reduce friction and also reduce your chance to notice a mistake.
- Unreviewed plugins and skills. Microsoft does not validate custom skills created by users and says plugin quality depends on the publisher. Treat them like software installs.
- Shared apps. For the App skill (a preview feature for Frontier participants), Microsoft warns that anyone with a share link can open and use the app, including all its data, so share responsibly.
- Human error at the approval step. The most likely failure is a tired person clicking Send on a draft they did not read.

Controls an administrator has
If you manage the Microsoft 365 account for your business, Microsoft documents these levers:
- Who has access: spending policies in the Microsoft 365 admin center (Copilot, Cost Management, Configuration), scoped to everyone or specific security groups.
- Which models: turn off the Anthropic model family under Copilot settings. This changes which models appear and does not change whether the user can use Cowork.
- Browser use: the Cowork Browsing tenant setting turns the capability on or off, and Cowork respects allowlist, blocklist and view-only policies for Microsoft Edge.
- Plugins: deploy, restrict or hide plugins and connectors.
- Visibility: a Cowork usage report and a consumption dashboard, plus the unified audit log.
- Deployment: disable automatic installation of the Copilot app, or distribute it through Intune, Configuration Manager or Group Policy.
Small businesses often have no dedicated administrator, so the person with the admin password is the owner or an outside provider. That is fine, as long as someone is explicitly responsible. If nobody is, you are accepting default settings by accident.
Quebec and Canadian considerations
This article is not legal advice. It is a prompt to ask the right questions. Quebec's private sector privacy law (often called Law 25) and the federal privacy framework both care about what personal information you collect and where it goes, whether or not an AI is involved. Putting customer personal information into any AI tool is a decision to document. Our guide to writing an AI usage policy gives you a one-page structure for this, and our overview of where Canada's federal AI law stands explains the regulatory background. For official guidance, the Office of the Privacy Commissioner of Canada and Quebec's Commission d'accès à l'information publish material for businesses.
A safe 30-day pilot: checklist for a small business
Do not roll an agent out to the whole company on day one. A four-week pilot with one or two people gives you evidence instead of opinions.
Cowork pilot checklist
- ☐ Confirm with whoever holds your Microsoft agreement that Cowork is allowed and how it is billed.
- ☐ Pick one or two pilot users, and give access only to them (a security group in the spending policy).
- ☐ Set a modest usage limit per user, and remember a limit is a safeguard, not a hard gate.
- ☐ Leave the model picker on Auto, and check which models your administrator has enabled.
- ☐ Move working files from local desktops into OneDrive or SharePoint, because Cowork cannot use local files.
- ☐ Review who can open what in SharePoint before the pilot starts.
- ☐ Start with draft-only tasks: inbox summary, calendar clean-up, internal documents.
- ☐ Keep customer personal information and health or financial records out of prompts until you have a written rule.
- ☐ Do not choose "always allow" for external email.
- ☐ Keep a simple log: task, time saved, mistakes caught at the preview step.
- ☐ After week two, review the usage report and the audit log with your IT provider.
- ☐ After week four, decide: expand, restrict or stop.
Cost and budget: DIY versus getting help
We cannot give you a per-credit price, because Microsoft's pages we read do not publish one, and we will not guess. What we can give you is a way to budget.
| Cost item | Do it yourself | With a technician |
|---|---|---|
| Cowork usage | Usage-based, set by your plan and tasks. Use Microsoft's Copilot Credit Estimator and set per-user limits. | Same charges. A provider can help set sensible limits and read the usage report. |
| Admin setup (spending policy, groups, model settings) | 1 to 3 hours if you know the Microsoft 365 admin center, longer if you do not (our estimate) | Usually one remote session |
| Cleaning up file sharing and moving files to the cloud | Your time, plus the risk of missing a sensitive folder | Audit and fix, with a short report |
| Writing a one-page AI usage rule | A few hours with a template | Template plus review for your sector |
| Staff training | Free Microsoft documentation, 1 to 2 hours per person (our estimate) | A guided session on your own files and examples |
For reference, the IT Cares Expert Consultation is a single 119.99$ CAD, 60-minute session, which is enough for most small-business Microsoft 365 reviews of this kind. The right question is not "what does Cowork cost?" but "what does one avoidable mistake cost?" A single misdirected email with a client quote or a personal record can cost more than a year of careful setup.
Common mistakes we expect to see
- Assuming it is free because Copilot Chat is. Cowork is billed by usage for organizations. Confirm before the first big task.
- Expecting it to see local files. Microsoft says it cannot access or edit files stored locally on your device.
- Granting access to everyone by accident. A broad spending policy, even with a 1-credit limit, still grants access to everyone in scope, as Microsoft's own worked example shows.
- Approving without reading. The preview is the safety net. Use it.
- Using it for tasks that need guaranteed accuracy. Microsoft says it is not intended for that.
- Believing old articles. Early coverage described a preview limited to Frontier participants. Admin controls changed at general availability. Check dates.
- Skipping the policy. If staff use AI without a rule, you have shadow AI even inside a Microsoft product.
- Treating a preview as production. The personal version and the App skill are labeled preview by Microsoft.
Cowork, Copilot Chat, or another assistant?
You do not need Cowork to benefit from AI at work. If your tasks are single-step, such as drafting an email or summarizing a PDF, Copilot Chat or another assistant is enough and carries less risk. If you want a side-by-side of the main assistants, see our ChatGPT, Claude, Gemini and Copilot comparison. Cowork starts to make sense when you repeatedly do multi-step chores that span Outlook, Teams, calendar and files, you are already deep in Microsoft 365, and you are willing to supervise.
When to call a professional
You can try Cowork on your own. Consider help when:
- You are an administrator for the first time and the spending policy, groups and model settings look unfamiliar.
- You handle personal, health, legal or financial information, and want a written rule before staff use any AI tool.
- You discover your SharePoint permissions are wider than you thought.
- Something was sent that should not have been, and you need to check what happened and contain it.
- You want AI services set up around Microsoft 365 for the whole team. See our AI services page and the IT Cares shop for the packaged options.
IT Cares has provided remote and on-site IT support in Quebec and across Canada since 2014. We help with Microsoft 365 setup, security reviews and AI tool policies. Our Microsoft 365 page has the details, and you can reach us at 1 (888) 711-9428 or through the booking button below.
For small businesses
If you run a small company or a contracting business and want to think about AI beyond Microsoft 365, Lead4Pro, a Quebec marketing agency, has a page on marketing and lead generation for construction and renovation contractors. We make no claim about outcomes, so treat it as one input in your own research.
The bottom line
Copilot Cowork is a real change in what an office assistant can do inside Microsoft 365: it carries out multi-step work, shows its steps, and asks before sensitive actions. It is generally available for work and school accounts, in preview for personal accounts, billed by usage for organizations, and bound by your own permissions. It is also an AI that can send a wrong email if you let it. Start small, keep approvals on, keep sensitive data out until you have a written rule, and measure the result over 30 days. That is not a slow approach. It is the one that avoids the expensive story.
Still stuck? Get a technician on it now
Remote support from IT Cares: we connect to your device, fix it with you watching, and explain what happened.
Frequently asked questions
Related guides
- Microsoft Copilot for business: the complete guide
- AI agents explained: business security risks
- AI browser agents and their security risks
- Shadow AI: the hidden risk of unapproved tools
- How to write an AI usage policy for your business
- ChatGPT, Claude, Gemini and Copilot compared
- Privacy impact assessment (PIA) guide
- Microsoft 365 support in Canada
Sources and official references
Last verified: November 11, 2026
- Microsoft Learn: Copilot Cowork overview
- Microsoft Learn: Cowork common questions
- Microsoft Learn: Use Copilot Cowork
- Microsoft Learn: Determine access controls for Copilot Cowork
- Microsoft Learn: Manage Copilot Cowork for your organization
- Microsoft Learn: Choose a model for Copilot Cowork
- Microsoft Learn: Responsible AI FAQ for Cowork
- Microsoft Learn: Claude models from Anthropic in Microsoft Online Services
- Microsoft Support: Get started with Cowork (personal accounts)
- Microsoft: Copilot Cowork product page
- Office of the Privacy Commissioner of Canada
- Commission d'accès à l'information du Quebec
