Someone at your business has already asked about Copilot. Maybe a director saw a demo, maybe a competitor mentioned it, maybe Microsoft’s upsell reached your inbox. The question lands on whoever handles IT decisions in one of two forms: “should we get this?” or, more usefully, “what would it actually change, and what does it cost us to find out?”
Here is the honest 2026 answer for a typical Scottish SME: Copilot is genuinely useful for specific roles, clearly overpriced for others, and the licence fee is the smaller half of the project. The bigger half is a data-permissions clean-up most businesses did not know they needed, and skipping it is how Copilot deployments turn into incident reports. This guide covers what it does well, what it costs, the prerequisite nobody advertises, and how to pilot it without betting the budget.
What Copilot actually is
Microsoft 365 Copilot is an AI assistant wired into the apps your business already uses: it drafts and rewrites in Word and Outlook, summarises Teams meetings and long email threads, builds first-pass presentations, helps interrogate spreadsheets, and answers questions across your organisation’s files and mail (“what did we agree with the supplier in March?”). Its distinguishing feature against free AI tools is precisely that access: it works from *your* business’s data, inside your tenancy, rather than from whatever you paste into a chat window.
That distinguishing feature is also, as we will get to, its distinguishing risk.
What it’s genuinely good at (and not)
Real-world results cluster predictably. Strong: meeting summaries and action lists (often the single most-loved feature), first drafts of routine documents and emails, catching up on long threads, and summarising or reformatting existing material. A widely reported UK government pilot measured average savings around 26 minutes per person per day, and while your mileage will vary, the direction matches what SME users report: it compresses the shallow work.
Weak: anything requiring your business’s judgement, current pricing, or accuracy without checking. It drafts; humans still decide and verify. Irrelevant: roles that live outside the Microsoft apps — the workshop, the van, the shop floor. A licence for someone who touches Outlook twice a day is a subscription to guilt.
The role-by-role pattern is the money insight: Copilot value concentrates in people who spend their day in email, meetings and documents — managers, sales, finance, admin — and evaporates outside them. Which is why the sensible buying unit is a handful of licences, not a company-wide rollout.
What it costs
Copilot for Microsoft 365 is an add-on to your existing licences: list price around £24.70 per user per month ex VAT on annual commitment, with lower promotional and reseller pricing currently in the market (mid-teens per user per month at the time of writing, some offers running to autumn 2026). It sits on top of any Business plan (Basic, Standard or Premium), so a Copilot user’s true cost is their base licence plus the add-on — call it £30 to £42 per user per month all-in depending on tier and deal.
Against a salary, ten minutes of genuinely saved time a day pays for it. Against a team of licences bought for everyone “to be fair”, it is one of the fastest-growing waste lines we see in licence audits. Buy for the roles where the arithmetic works; review usage quarterly; cull without sentiment.
The prerequisite nobody advertises: your permissions
Here is the part that decides whether Copilot is an asset or an incident. Copilot can see everything the signed-in user can see across your Microsoft 365 tenancy. Not more — it does not bypass a single permission — but crucially, not less either. And most SME tenancies have spent years accumulating permission sludge: sites shared with “everyone”, folders inherited from departed projects, HR spreadsheets one click too open.
Before Copilot, that oversharing sat harmlessly out of sight, protected by the fact that nobody went looking. Copilot removes that protection: it goes looking on every prompt, and it is very good at finding. Audits of business tenancies repeatedly find material oversharing — salary files, board papers, client data — that would surface in a Copilot answer to an ordinary question from an ordinary employee. The tool does not create the exposure; it reveals the exposure you already had, at conversational speed.
The fix is a permissions and sensitivity review before licences are assigned: who can see what, tightened to who *should* see what, with sensitive material labelled and excluded. This overlaps almost entirely with the hardening in our Microsoft 365 security best practices guide, which is why we treat Copilot readiness as a security project with an AI outcome rather than a software purchase.
A sensible pilot plan
- Fix the permissions first. The review above, sized to your tenancy. For a tidy small business, days; for a decade of sprawl, longer, and worth it regardless of Copilot.
- Pick 3 to 5 pilot users by role, not seniority. The meeting-heavy, email-heavy, document-heavy people. Give them the promotional-rate licences.
- Set two or three measurable uses. Meeting summaries into your CRM, first-draft proposals, month-end report prep — concrete tasks, not “explore AI”.
- Run 60 to 90 days, then decide with numbers. Time saved, quality of output, actual weekly usage. Expand to roles that match the winners’ profile; do not expand to roles that match the losers’.
- Write the rules down. What staff may put into AI tools, what must be checked before it leaves the building, what stays out entirely. Our AI acceptable use policy template covers this, and it applies to the free tools your staff are already using whether or not you buy Copilot.
Frequently asked questions
How much does Microsoft Copilot cost for a small business?
List price is about £24.70 per user per month ex VAT (annual commitment) on top of a Microsoft 365 Business licence, with promotional and reseller rates currently lower. Total cost per equipped user lands around £30 to £42 per month depending on base tier and deal.
Do we need a special Microsoft plan for Copilot?
No — it adds onto Business Basic, Standard or Premium (and enterprise plans), with users on Entra ID accounts. There is no longer a minimum seat count, so a two-licence pilot is perfectly possible.
Is Copilot safe with our company data?
Your data stays in your tenancy and is not used to train Microsoft’s models, and Copilot never exceeds a user’s existing permissions. The practical risk is that your existing permissions are looser than anyone realised; that is the pre-deployment clean-up, and it is not optional.
Is Copilot worth it compared to free AI tools?
For work built on your own business data — your files, mail, meetings — Copilot does things pasted-into-a-chatbot tools cannot, with better data handling. For generic drafting, free tools remain hard to beat on price. Many businesses sensibly run both, governed by one usage policy.
Should a 10-person business buy Copilot for everyone?
Almost never. Buy for the two to four roles drowning in email, meetings and documents; measure; expand only where the profile matches. Blanket rollouts are how a promising tool becomes a budget grudge.
Pilot it properly, or not yet
Both are respectable answers; the indefensible one is buying licences without the permissions work. If Copilot is on your agenda, our free IT health check doubles as the readiness assessment: we audit your tenancy’s sharing and security state, tell you plainly how far you are from safe deployment, and price both halves of the job. Get in touch and we will tell you honestly whether your business is a “yes”, a “not yet”, or a “not this year”.
