Should you allow Copilot file access on your PC?

What did Microsoft just announce about Copilot file access?

On October 7, 2026, Microsoft announced that Copilot on Windows will be able to read the local files on your PC and take actions across the operating system, as long as you give it permission. Microsoft calls this Hybrid Intelligence: some AI models run on your machine, some run in the cloud, and Copilot decides which one handles each task. The stage demo was very relatable. Copilot found a set of tax documents, renamed them, zipped them and drafted an email to an accountant. A local model did the work, so nothing had to leave the device. If you've ever lost a Sunday evening digging through your Downloads folder, that's an appealing pitch.

The list of what it can do is long. With your permission, Copilot can understand content on your PC, including files and recent activity. It can organize files, check device diagnostics, troubleshoot problems, write code and run multi-step workflows on the machine itself. A persistent agent mode called Autopilot gets the same local context and can keep working for you in the background. You won't get any of this right away. Local file access, PC actions and on-device models reach Copilot+ PCs over the coming months, and some new Windows Search actions are starting with Insiders first. Not every Windows 11 machine will get them, so an older laptop may never see the update.

For anyone choosing an AI assistant, this raises a question that's now unavoidable: what is it allowed to read, and what is it allowed to do? Those are separate questions. Reading is about privacy: who sees your client list. Doing is about risk: what happens when software renames, moves or sends something on your behalf and gets it wrong. Here's my take: the permission prompt matters more than the clever features. A small business owner can live without an assistant that zips tax files. What they can't afford is an assistant they let roam too freely, with no clear sense of where it's been. The rest of this guide goes through both questions in plain English.

What can Copilot see and do once you grant file access?

Once you grant access, Copilot can search and read files in the folders it's allowed into. With actions turned on, it can also rename, move and organize those files and run multi-step tasks on your PC. In the earlier preview of Copilot Actions, the agent ran under its own separate agent account rather than yours. It could reach a limited set of what Windows calls known folders: Documents, Downloads, Desktop and Pictures. Anything outside those needed your explicit approval. That's a sensible design. A separate account makes the agent's activity easier to tell apart from yours, and the default folder list puts a fence around it. The final Copilot+ PC release may adjust the details, so check the prompts carefully when the update arrives.

For a small business, the catch is simple: those known folders hold most of your sensitive files. Think about where things actually end up. Supplier invoices you opened from email sit in Downloads. The client spreadsheet you've updated every week since 2021 is on the Desktop. Signed contracts, quotes, payroll exports and the scanned ID a new hire sent you are in Documents. So "limited to known folders" sounds narrow, but for most solo operators and small teams it covers almost the whole business. That doesn't mean the feature is reckless. It means you should think of the default scope as wide, not modest, and decide on that basis.

Microsoft says Hybrid Intelligence asks for approval before sending anything off the device, and that local models can handle many tasks without the cloud. That's a real improvement. Still, "local" and "harmless" aren't the same thing. An agent that renames forty files the wrong way, files a contract in the wrong client's folder or attaches last year's price list to a draft email can do damage without touching a server. That's why it's worth knowing how to check whether an AI agent stays inside what you asked before you let it act for you. Reading permissions protect your privacy. Action permissions protect your work. You need both.

Is Copilot safe for business files like contracts, invoices and client lists?

Copilot can be safe for business files if you limit what it reaches and what it's allowed to change. The real risk isn't bad intent. It's breadth. A trusted assistant that can read everything still sees things you'd never hand a temp on their first day. Picture the folders on your laptop as a filing cabinet. Most owners wouldn't give a new contractor every drawer just to help find one receipt. Handing broad file access to any assistant is the same decision, made with one click instead of a set of keys. Make it deliberately, file type by file type, not on autopilot.

Some documents need more care than others. Contracts often carry confidentiality clauses, and an NDA you signed may restrict who sees the terms. Invoices contain bank details, amounts and supplier names that fraudsters would love. Client lists hold names, phone numbers and sometimes notes about people. In Europe and many other places, that's personal data covered by data protection rules, and you're responsible for how it's handled. HR files, ID scans and that "logins.txt" file everyone pretends they don't have are a step up again. None of these belong in the reach of an always-on agent by default, whoever built it.

A practical fence is to keep sensitive material outside the default known folders. For example, keep a separate folder for client contracts and finance, and only approve access to it for a specific task, one time. That's a speed bump, not a lock, because you can still approve access in a hurry. Pair it with the basics you should already have: device encryption, a strong sign-in and backups. Mac owners are having the same argument right now. Apple is tightening up the macOS permission that lets AI agents see your whole disk, and the lesson carries over to Windows: grant the narrowest access that still gets the job done.

How do you limit or turn off Copilot file access in Windows?

You can limit or turn off Copilot file access in the Copilot app. Click your account picture in the bottom-left corner, open Settings and scroll to Permission settings. There you'll find separate switches for File search, File read and Copilot Actions. When a chat asks to look through your files, Copilot shows three choices: "Always allow," "Allow once" and "Not now." For business machines, "Allow once" is the right habit. It gets today's task done without leaving the door open for tomorrow. One caveat: these menus come from the current app and earlier previews. The labels may shift when the Hybrid Intelligence update reaches Copilot+ PCs.

For the new features, Microsoft says there's a control layer that lets you grant or revoke file access and PC actions at any time, including permissions for local models. It also looks like you'll be able to switch Hybrid Intelligence off entirely. Microsoft hasn't published the exact menu names yet, so the first thing to do after the update is open Settings and see what's on by default. If you manage a few laptops for a team, IT admins have long had a policy that turns off Copilot in Windows completely. Finer per-feature controls for businesses have tended to lag behind consumer settings, so don't assume they're there on day one.

Here's the default I'd recommend to most small business owners. Leave File search on if finding files quickly genuinely saves you time. Keep File read off until you have a specific job for it. Keep Copilot Actions off until you've watched it work on a test folder full of copies. Give it real tasks that don't matter much, like "rename these product photos by date," and check the results before trusting it with anything that does. Revisit the settings every few months, because feature updates have a way of resetting expectations. Ten minutes of setup now beats an afternoon of figuring out which client folder got reorganized and why.

What's the alternative to giving an AI assistant access to all your files?

The alternative is a send-only assistant, one that only ever sees the documents you choose to hand it. Instead of granting access to folders, you share one file for one question. That's how Agent Sonic works. It lives in WhatsApp, and you message it like any other contact. You forward a single PDF and ask, "What's the cancellation clause in this contract?" Sonic reads that one document and answers in the chat. There's nothing to install and no folder permissions to manage. It can't wander through your Desktop because it never had a key to it. The privacy question is answered by design, not by a settings page.

Day to day, it looks like ordinary messages. Forward a supplier's invoice and ask, "Does the math on this add up?" Send a spreadsheet and write, "Summarize last month's expenses by category." Drop in a lease and ask, "When can I give notice, and how much?" Then turn the answer into action: "Remind me 60 days before this contract renews," or "Add the payment due date to my Google Calendar." If you're about to sign something, you can send the contract and get the risks back in plain English before you put your name on it. Each answer covers only the document you sent, which is exactly the point.

To be fair, the trade-off is real. A send-only assistant won't tidy your Downloads folder, zip a year of receipts or troubleshoot your Wi-Fi driver. That's housekeeping, and Copilot is built for it. My honest view is that you should use both, each where it's strongest. Let Copilot organize a non-sensitive working folder. Send contracts, invoices and client documents to an assistant that only reads what you give it, one file at a time. If you're comparing options, this practical checklist for choosing a WhatsApp AI assistant covers privacy, documents and setup. When you're ready to try it, get access to Agent Sonic and you'll receive the number and a short onboarding.

Frequently asked questions