A European financial institution must ensure that all Copilot Studio agent conversation data remains within the European Union and never crosses to US-based Azure regions. Which configuration satisfies this data residency requirement?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Think of Power Platform environments like a restaurant franchise — each franchise location uses local suppliers. Creating your environment in a European region (like West Europe or Germany) tells Power Platform to store and process all conversation data on EU-based Azure infrastructure, satisfying residency laws like GDPR.
Full explanation below image
Full Explanation
Data residency for Copilot Studio is controlled at the Power Platform environment level. When you create an environment, you select a geographic region — this determines where Microsoft stores your Dataverse data, conversation logs, agent configurations, and AI processing for that environment. Choosing a European region (West Europe, North Europe, or Germany) ensures data stays within EU Azure datacenters.
Microsoft additionally offers the EU Data Boundary commitment at the Microsoft 365 / Azure tenant level, but within Power Platform the environment region is the primary control.
Option A (setting the agent language to en-GB) changes language/locale for NLP processing — it has no effect on data storage location.
Option C (a 'EU Data Boundary' toggle in the agent config panel) does not exist as an agent-level setting. Data residency is an environment-level, not agent-level, configuration.
Option D (Purview data residency policy on a resource group) — Purview data residency policies apply to Microsoft 365 workloads at tenant level, not to individual Azure resource groups, and Copilot Studio is not configured via Azure resource groups.
Exam rule: Data residency = Power Platform environment region. Create environments in the required geographic region. This affects all Copilot Studio agents hosted in that environment. For regulated industries, verify that the chosen region has the specific compliance certifications required (ISO 27001, SOC 2, etc.).