Governance Starts at the Tenant Level. Before Copilot can operate effectively, organizations must establish a secure and compliant foundation within their Microsoft 365 tenant. The tenant acts as the control surface, defining how Copilot behaves, who can use it, and what data it can access. This chapter walks through those controls so you can enable Copilot deliberately, not by default.