An organization needs to implement eDiscovery on Copilot for Microsoft 365 interactions for a legal hold related to a regulatory investigation. An in-scope employee used Copilot extensively. Where are Copilot interaction logs stored for eDiscovery purposes?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — Copilot interaction logs live in the user's Exchange Online mailbox in a hidden folder, so you can find them with Purview eDiscovery tools. That mailbox-based storage is what makes prompts and responses discoverable for legal hold.
Full Explanation
The user's Exchange Online mailbox is correct because Microsoft 365 Copilot interaction data (prompts and responses) is stored in the user's Exchange Online mailbox in a hidden folder, specifically in the SubstrateHolds or Compliance Records folder. This makes Copilot interaction data discoverable through Microsoft Purview eDiscovery tools (Content Search, eDiscovery Standard, and eDiscovery Premium) using the same mailbox-based search infrastructure. The Azure Monitor Log Analytics workspace is wrong because Azure Monitor Log Analytics stores Azure service operational logs, not M365 Copilot conversation content. The Microsoft Teams compliance records storage is wrong because Teams compliance records are stored for Teams messages; Copilot interactions have their own dedicated storage in Exchange Online. The SharePoint Online content database is wrong because SharePoint stores documents, not Copilot conversation logs.