Microsoft 365 Copilot Achieves ISO/IEC 42001:2023 Recertification

Microsoft 365 Copilot has successfully passed an external security audit, receiving the ISO/IEC 42001:2023 certification for the second consecutive year. This certification, first awarded in March 2025, confirms that the AI system meets stringent standards in governance, risk assessment, data management, and transparency. The 2026 recertification was achieved with zero non-conformities and zero improvement observations, indicating a clean audit. Microsoft has enhanced its AI risk assessment processes and expanded the certification scope to include Microsoft Copilot Studio. The company now employs a multi-model architecture, integrating OpenAI and Anthropic Claude models. This achievement is expected to bolster trust among enterprise customers, with over 15 million paid seats already in use. Microsoft aims to leverage its AI systems to continuously improve its services and maintain compliance with evolving standards.

Key Points: • Microsoft 365 Copilot received ISO/IEC 42001:2023 recertification with zero findings. • The certification covers governance, risk assessment, data management, and transparency. • Microsoft's AI architecture now includes models from both OpenAI and Anthropic.