I don't know what I'm allowed to ask Copilot with company data

Microsoft 365 Copilot is now part of daily work, yet users still cannot judge which prompts containing client names, contracts, or strategy are safe. Policy exists but offers no prompt-level decision habit, so staff either avoid useful tasks or improvise with sensitive