Risky AI usage (preview) policy template

This policy detects risky interactions with AI tools, such as:

• User prompts that contain sensitive information
• AI responses that might inappropriately reveal internal data

Detection applies to tools like Microsoft 365 Copilot and Copilot in Microsoft Edge. These activities contribute to user risk scores and support Adaptive Protection. You can create this policy directly in the Insider Risk Management experience or through Data Security Posture Management (DSPM) for AI in Microsoft Purview.

This policy also supports wider risk detection when paired with:

• The Microsoft Insider Risk Extension for Microsoft Edge or the Purview Extension for Chrome
• A communication compliance policy to review messages for inappropriate content
• An optional HR connector to identify departing users