{
"canonical_url": "microsoft.com/en-us/microsoft-copilot/microsoft-copilot-studio",
"category": "Enterprise agent platform",
"commercial": true,
"compliance": [
{
"certificate_id": "microsoft",
"covers_resource": "unknown",
"credited": true,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Microsoft",
"terms": [
"star_level_1",
"star_level_2",
"star_for_ai_level_1",
"partner_entries",
"caiq",
"certification",
"validaited-ai-caiq",
"eu-cloud-coc",
"iso-iec-42001",
"star_for_ai_level_2",
"validaited-42001"
]
},
"display": "STAR for AI: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/microsoft",
"framework": "csa_star",
"issued": "2016-04-05",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:33Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_FOR_AI"
},
{
"certificate_id": "microsoft",
"covers_resource": "unknown",
"credited": true,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Microsoft",
"terms": [
"star_level_1",
"star_level_2",
"star_for_ai_level_1",
"partner_entries",
"caiq",
"certification",
"validaited-ai-caiq",
"eu-cloud-coc",
"iso-iec-42001",
"star_for_ai_level_2",
"validaited-42001"
]
},
"display": "STAR Level 2: found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/microsoft",
"framework": "csa_star",
"issued": "2016-04-05",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:33Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "STAR_LEVEL_2"
},
{
"certificate_id": "F1603087869",
"covers_resource": "inherited",
"credited": true,
"detail": {
"cso": "Azure Government (includes Dynamics 365)",
"csp": "Microsoft",
"deployment_model": "Government Community Cloud",
"fedramp_status": "FedRAMP Authorized",
"impact_level": "High"
},
"display": "FedRAMP High: FedRAMP Authorized (FedRAMP Marketplace, 2026-10-26)",
"evidence_url": "https://marketplace.fedramp.gov/products/F1603087869",
"framework": "fedramp",
"issued": "2020-04-29",
"issuer": "JAB / 3PAO Kratos",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "64bc98d4cebbc137a6e7b94442b8678790eefa29e4347928a0de8620b56a168a",
"period_end": null,
"retrieved_at": "2026-10-26T12:24:25Z",
"review_reason": "vendor authorization for Azure Government (includes Dynamics 365); entity 1.00",
"reviewer": null,
"scope": "entity",
"source": "fedramp",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "FEDRAMP_HIGH"
},
{
"certificate_id": "microsoft",
"covers_resource": "unknown",
"credited": true,
"detail": {
"note": "From the STAR Registry index card; STAR Level 1 is a self-assessment (CAIQ), Level 2 a third-party certification or attestation.",
"organization": "Microsoft",
"terms": [
"star_level_1",
"star_level_2",
"star_for_ai_level_1",
"partner_entries",
"caiq",
"certification",
"validaited-ai-caiq",
"eu-cloud-coc",
"iso-iec-42001",
"star_for_ai_level_2",
"validaited-42001"
]
},
"display": "ISO 42001: Found in CSA STAR Registry on 2026-10-26",
"evidence_url": "https://cloudsecurityalliance.org/star/registry/microsoft",
"framework": "iso42001",
"issued": "2016-04-05",
"issuer": "Cloud Security Alliance",
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "51c7c3cba565bd44fb1a057b2b3d9312894a56c98eab49f361756b0b3c868a15",
"period_end": null,
"retrieved_at": "2026-10-26T12:25:33Z",
"review_reason": "entity 1.00 (index card)",
"reviewer": null,
"scope": "entity",
"source": "csa_star",
"status": "active",
"tier": 1,
"valid_until": null,
"variant": "ISO42001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Cyber Essentials: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "cyber_essentials",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "CYBER_ESSENTIALS"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Cyber Essentials Plus: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "cyber_essentials",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "CYBER_ESSENTIALS_PLUS"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "dora",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "EU AI Act: Art. 50 statement (vendor statement, 2026-10-26)",
"evidence_url": "https://www.microsoft.com/en-us/trust-center",
"framework": "eu_ai_act",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "cb29ddf7ba6a197e4eeeb6a46594e22391e370c1510d926b807e7c4845a964ce",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ART50_STATEMENT"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "fedramp",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "gdpr",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "HIPAA: BAA available (vendor-claimed, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "hipaa",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "hitrust",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "irap",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27001: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27001"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27017: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27017"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27018: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27001",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27018"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "ISO 27701: Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "iso27701",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": "ISO27701"
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "pci_dss",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
},
{
"certificate_id": null,
"covers_resource": "unknown",
"credited": true,
"detail": {
"pages_visited": 6
},
"display": "Vendor-claimed (vendor page, 2026-10-26)",
"evidence_url": "https://learn.microsoft.com/en-us/compliance/regulatory/offering-home",
"framework": "soc2",
"issued": null,
"issuer": null,
"match_confidence": 1.0,
"next_check": "2026-11-02",
"payload_hash": "15994eab65c970d0a0f4e59e2588c2c4446d268f14094f445845fe9fef3d3c7a",
"period_end": null,
"retrieved_at": "2026-10-26T12:30:12Z",
"review_reason": "framework named on the vendor's own page",
"reviewer": null,
"scope": "entity",
"source": "vendor_trust_centers",
"status": "active",
"tier": 4,
"valid_until": null,
"variant": null
}
],
"deployment": "Microsoft 365; Azure; Agent Store",
"description": "Major low-code enterprise agent builder and publishing route into Microsoft Agent Store.",
"disclaimer": "Reference implementation by Hemant Naik. Compliance information is compiled from the sources shown as of the date shown. It is not an assessment, certification, legal opinion or recommendation. Confirm current status with the vendor and the issuing body.",
"domains": {
"business": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 32.5,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "general",
"rank": 2,
"recomputed": 96.0,
"score": 90.9,
"score_version": "sar-score-2.0",
"seed_rank": 2,
"seed_score": 96.0,
"source": "seed_xlsx",
"unknown": []
},
"cybersecurity": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 36.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "security",
"rank": 11,
"recomputed": 84.1,
"score": 87.9,
"score_version": "sar-score-2.0",
"seed_rank": 11,
"seed_score": 84.1,
"source": "seed_xlsx",
"unknown": []
},
"data": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 29.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso27701": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "data",
"rank": 18,
"recomputed": 89.4,
"score": 95.2,
"score_version": "sar-score-2.0",
"seed_rank": 18,
"seed_score": 89.4,
"source": "seed_xlsx",
"unknown": []
},
"finance": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 29.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.5,
"pci_dss": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 33,
"recomputed": 78.2,
"score": 83.8,
"score_version": "sar-score-2.0",
"seed_rank": 33,
"seed_score": 78.2,
"source": "seed_xlsx",
"unknown": []
},
"government": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 43.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"fedramp": 0.5,
"iso27001": 0.15,
"iso42001": 0.5
},
"profile": "regulated",
"rank": 3,
"recomputed": 96.6,
"score": 86.0,
"score_version": "sar-score-2.0",
"seed_rank": 3,
"seed_score": 96.6,
"source": "seed_xlsx",
"unknown": []
},
"healthcare": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 29.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"hipaa": 0.15,
"hitrust": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "regulated",
"rank": 25,
"recomputed": 78.2,
"score": 83.8,
"score_version": "sar-score-2.0",
"seed_rank": 25,
"seed_score": 78.2,
"source": "seed_xlsx",
"unknown": []
},
"insurance": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 26.7,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"hipaa": 0.15,
"iso27001": 0.15,
"iso42001": 0.5,
"pci_dss": 0.15,
"soc2": 0.15
},
"profile": "regulated",
"rank": 18,
"recomputed": 78.2,
"score": 83.5,
"score_version": "sar-score-2.0",
"seed_rank": 18,
"seed_score": 78.2,
"source": "seed_xlsx",
"unknown": []
},
"legal": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 29.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso27701": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "regulated",
"rank": 19,
"recomputed": 78.2,
"score": 83.8,
"score_version": "sar-score-2.0",
"seed_rank": 19,
"seed_score": 78.2,
"source": "seed_xlsx",
"unknown": []
},
"regulatory": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 29.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso27701": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "regulated",
"rank": 31,
"recomputed": 78.2,
"score": 83.8,
"score_version": "sar-score-2.0",
"seed_rank": 31,
"seed_score": 78.2,
"source": "seed_xlsx",
"unknown": []
},
"sales": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 29.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"gdpr": 0.15,
"iso27701": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "commercial",
"rank": 17,
"recomputed": 86.7,
"score": 91.6,
"score_version": "sar-score-2.0",
"seed_rank": 17,
"seed_score": 86.7,
"source": "seed_xlsx",
"unknown": []
},
"supply_chain": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 32.5,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "operations",
"rank": 12,
"recomputed": 83.6,
"score": 92.0,
"score_version": "sar-score-2.0",
"seed_rank": 12,
"seed_score": 83.6,
"source": "seed_xlsx",
"unknown": []
},
"technology": {
"components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 36.0,
"health": 20.0,
"trust": 20.0
},
"components_version": "components-from-signals-1.0",
"confidence": 1.0,
"evidence_coverage": 1.0,
"governance_credited": {
"csa_star": 0.5,
"iso27001": 0.15,
"iso42001": 0.5,
"soc2": 0.15
},
"profile": "technology",
"rank": 3,
"recomputed": 98.6,
"score": 95.0,
"score_version": "sar-score-2.0",
"seed_rank": 3,
"seed_score": 98.6,
"source": "seed_xlsx",
"unknown": []
}
},
"external_ids": {},
"first_seen": "2026-10-26T12:11:40Z",
"governance": {
"certification_disclaimer": true,
"claims": [],
"evidence_urls": []
},
"id": "res_a10498228c36b41a",
"identity": {
"evidence": [
"vendor_domain_product_page"
],
"rules_version": "identity-1.1",
"tier": 2
},
"issues": {
"advisories": 0,
"cves": 1,
"incidents": 0,
"links": [
{
"date": "2024-08-06",
"kind": "cve",
"title": "CVE-2024-38206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38206"
}
],
"regulator_actions": 0,
"withdrawn_certificates": 0
},
"last_seen": "2026-10-26T12:11:40Z",
"license": "Microsoft service",
"name": "Microsoft Copilot Studio",
"news": [],
"news_checked": true,
"protocols": {
"a2a": {
"checked_at": "2026-10-26T12:23:19Z",
"parser_version": "a2a-0.3+1.0",
"status": "not_found"
},
"ard": {
"checked_at": "2026-10-26T12:23:18Z",
"parser_version": "ard-0.91",
"status": "not_found"
},
"mcp": {
"checked_by": "hemant.naik",
"checked_on": "2026-10-02",
"evidence_url": "https://learn.microsoft.com/en-us/microsoft-copilot-studio/agent-extend-action-mcp",
"note": "\"Extend your agent with Model Context Protocol\" (Microsoft Learn)",
"probe": {
"checked_at": "2026-10-26T12:23:20Z",
"status": "not_found"
},
"source": "curated_claim",
"status": "claimed"
}
},
"publisher_domain": "microsoft.com",
"resource_type": "platform",
"scope": "public",
"security": {
"advisories": 0,
"checked_at": "2026-10-26T12:31:28Z",
"cves": 1,
"source": "nvd",
"tier": 1
},
"seed": {
"last_verified": "2026-09-25",
"snapshot_date": "2026-09-25"
},
"seed_components": {
"adoption": 29.0,
"docs": 10.0,
"domain_fit": 100.0,
"ecosystem": 15.0,
"governance": 45.0,
"health": 20.0,
"trust": 25.0
},
"signals": {
"observed_popularity": "Commercial"
},
"slug": "microsoft-microsoft-copilot-studio",
"sources": [
{
"payload_hash": "9405d2f7b70ed936751f60e23a7575af3da507efd53ca79a7b5e9f53b659c8de",
"retrieved_at": "2026-10-26T12:11:40Z",
"system": "seed_xlsx",
"url": "https://www.microsoft.com/en-us/microsoft-copilot/microsoft-copilot-studio"
}
],
"tags": [],
"tenant": null,
"traces": [
{
"checked_on": null,
"date": "2025-08-06",
"format": "report",
"id": "tr_agentflayer_copilot_studio_2025",
"kind": "red_team",
"notes": "The same research covers ChatGPT, Cursor, Gemini and Salesforce Einstein; only the Copilot Studio case is attached here",
"observed": {
"actions": [
"followed instructions embedded in retrieved content",
"disclosed CRM/customer data",
"performed actions in the agent's connected tools"
],
"approval": false,
"egress": true,
"entry": "indirect prompt injection through ingested enterprise content",
"outcome": "Agent hijacked without user interaction in the Copilot Studio demonstration; Microsoft and other vendors issued fixes or guidance after disclosure",
"refused": false,
"secrets_touched": true
},
"reviewer": null,
"scenario": "Content the agent ingests (a shared document, an email, a web page) carries instructions that make it leak data or act on the attacker's behalf without the user's involvement",
"scope": "product",
"source": "Zenity Labs (Black Hat USA 2025)",
"tier": 2,
"title": "AgentFlayer: zero-click and one-click hijacks of enterprise agents, including a Copilot Studio customer-service agent",
"url": "https://www.zenity.io/research/agentflayer-vulnerabilities",
"vendor_response": "Vendor fixes and guidance after coordinated disclosure (per the Zenity write-up)"
}
],
"trust": {
"compliance": 5,
"identity": 2,
"issues": 3,
"protocols": 3,
"security": 1,
"traces": 2,
"vendor_compliance": 1
},
"url": "https://www.microsoft.com/en-us/microsoft-copilot/microsoft-copilot-studio",
"vendor": "Microsoft"
}