Rolling out Microsoft 365 Copilot in a small Swiss firm

Start with the free Copilot Chat your staff already have through Microsoft 365, fix who can see which files, and only then buy paid Copilot licences for the people whose work is mostly email, documents and meetings. For a Swiss firm under 300 users, the paid add-on is Copilot Business, listed in Switzerland at CHF 14.57 per user per month on annual billing (excluding VAT) when I checked on 15 October 2026.

Copilot is the AI most small Swiss firms will meet first, because they already pay for Microsoft 365. The risk is not the AI; it is switching it on across a file store where too many people can open too much. This is how I would approach it for a firm of 5 to 100 people.

What you already have: Copilot Chat

Copilot Chat is included with Microsoft 365 business subscriptions. Signed in with a work account, staff can chat, upload a file and get help with it, under Microsoft's enterprise data protection terms. What it cannot do without a paid licence is reach into the firm's mail, files and Teams through Microsoft Graph on its own. [4]

That makes Copilot Chat the right first step. It replaces personal ChatGPT accounts with a work tool the firm controls, at no extra licence cost, and shows you who actually uses AI before you pay for more.

What the paid licence adds, and what it costs

The paid licence lets Copilot work across a user's own email, calendar, meetings and documents, and adds Copilot inside Word, Excel, PowerPoint, Outlook and Teams. [4] For firms with 300 or fewer users on Microsoft 365 Business Basic, Standard or Premium, Microsoft sells it as Copilot Business, which has the same capabilities as the enterprise Copilot licence and supports up to 300 seats. [1, 2]

Prices are per user per month as listed on 15 October 2026; the add-on price was shown as reduced from CHF 17.00. [3] Two terms matter: Copilot Business is an annual commitment even when billed monthly, and you cannot switch existing enterprise Copilot licences to it until the commitment ends. [2] So start with a few licences, not the whole firm.

Where a Swiss firm's data goes

Two separate questions, with different answers:

• Storage. For tenants signed up in Switzerland, Microsoft's Product Terms data residency commitments cover Copilot. Prompts, responses and citations are stored at rest in the local region, alongside your other Microsoft 365 content. [6]
• Processing. The language model calls are a different matter. Microsoft routes them to the nearest data centres but can use other regions when capacity is short. EU users get the EU Data Boundary; for customers outside the EU, which includes Switzerland, Microsoft says queries may be processed in the US, the EU or other regions. [5]

Microsoft also states that prompts, responses and Graph data are not used to train the foundation models. [5] For most firms, that combination is acceptable under the Swiss data protection act with a processing contract in place. For a law firm, check it against your professional secrecy duties; I cover that in can a Swiss law firm use ChatGPT or Copilot with client data?

The real work: who can see what

Copilot only shows people content they already have permission to open. In a small firm that has grown its SharePoint and Teams sites organically, that can be a lot more than anyone intended. Microsoft's own setup guidance starts with finding overshared sites, removing "everyone except external users" access at tenant level, turning on audit, and reviewing access on overshared sites before Copilot reaches them. [7]

A useful detail for small firms: assigning a single paid Copilot licence also gives your SharePoint administrators the SharePoint Advanced Management features that support a Copilot rollout, including permission reports and access reviews. [8]

The order I would do it in

1. Write a one-page AI rule (template here) and make Copilot Chat with a work account the approved tool. Ask people to stop using personal AI accounts for firm work.
2. Tidy permissions on client folders, HR and finance sites. Remove firm-wide access groups from anything confidential.
3. Buy three to five Copilot Business licences for people who live in Outlook, Word and Teams, and give them four to six weeks.
4. Measure what changed in hours, not impressions. Keep the licences that earn their cost.
5. Then automate the shared work Copilot does not cover well on its own, such as a shared inbox or document intake. See AI email triage for a small professional services firm.

Steps 1, 2 and 4 are where an outside view helps most. They are part of my AI Opportunity Audit (CHF 750 to 1,500). For licensing and a firm-wide technical rollout, a Microsoft partner is often the right supplier; see who should a small Swiss firm hire for AI.