No. Dovetail agents do not use your data to train any AI models. All prompts, responses, and documents remain private to your organisation and are never used to improve or retrain underlying models. This is contractually guaranteed by Microsoft’s Data Protection Addendum and Dovetail’s own commitments. 

All data processed by Dovetail agents stays entirely within your Microsoft 365 tenant. No customer data leaves your environment at any point. Unlike other AI solutions, Dovetail never hosts or transfers your data to external servers. Everything runs inside your existing Microsoft 365 infrastructure, protected by Microsoft’s enterprise-grade security and compliance controls

Dovetail inherits all Microsoft 365 security, privacy, and compliance standards, including encryption at rest and in transit, Zero Trust architecture, Conditional Access, Microsoft Purview, and compliance with frameworks such as GDPR, ISO/IEC 27001, and SOC 2. Your data is protected by the same controls that safeguard your emails, files, and Teams chats. 

Dovetail agents are governed by your Microsoft 365 policies, including audit trails, retention policies, and sensitivity labels. All interactions can be monitored and logged using your existing Microsoft compliance tools. 

Unlike competitors that require data to be uploaded to external clouds or proprietary platforms, Dovetail runs natively inside your Microsoft 365 tenant. This means you keep full control, auditability, and compliance; no data ever leaves your environment, and you benefit from Microsoft’s world-class security and privacy guarantees.