Copilot can summarize or cite content that a legal team needs kept out of its responses. This post is for security architects, compliance leads, and IT leaders who run Microsoft Purview. It lays out a six-step blueprint that works for a small firm or an enterprise, the three controls that act on Copilot (site permissions, a label with a DLP policy, and Restricted Content Discovery), and the license each one needs, from Business Premium to E5.