The Three DLP Gates
The DLP location for Microsoft 365 Copilot and Copilot Chat provides three gates: a label condition that keeps files out of grounding, a sensitive information type condition that blocks web searches, and a prompt condition that refuses the prompt.
In GCC High
Every row below is a documented claim until a tenant check turns it into an observation. The basis column says which, and when.
| Control | GCC High | Basis |
|---|---|---|
| DLP policy location for Microsoft 365 Copilot and Copilot Chat | Available Reading and egress rules enforced as documented. | Documented 2026-10-08; Observed 2026-09-07, GCC High reference tenant (label rule and web-search rule both fired; word-boundary sensitive information type needed) |
📩 Don't Miss the Next Solution
Join the list to see the real-time solutions I'm delivering to my GCC High clients.