
On April 17, Microsoft turned on flex routing by default for EU Copilot users.
What does this mean for Microsoft users? It means your Copilot data can now leave the EU for processing. When their European servers hit capacity, your prompts, emails, and files are sent to the US, Canada, or Australia for AI processing.
So even if your data is stored in Europe, it's not necessarily being processed there anymore. And if you're supposed to be GDPR-compliant (or following NIS2 or DORA), that's a problem.
Oh, and they made it the default. New accounts created after March 25 already have it on. Everyone else is getting it turned on automatically.
You have to go turn it off yourself:
Copilot > Settings > Flex routing during load periods > do not allow
We wrote a blog on why this matters and what it means for EU businesses: https://proton.me/business/blog/microsoft365-copilot-flex-routing