Copilot Cowork for Law Firms

Microsoft made Copilot Cowork generally available on June 16, 2026. Copilot Cowork is a Microsoft 365 Copilot capability that takes a task you describe and runs it end to end across your apps, then returns a finished result.

This is different from the earlier Copilot experience. The older Copilot drafts or answers in the app you are in. Cowork builds a multi-step plan and runs it in the background, with checkpoints where you review the work.

Law firms should care, but proceed carefully. Cowork can handle multi-step drafting and document tasks, yet client confidentiality and privilege are at stake. You must control access and review every output.

What Copilot Cowork Can Do for a Firm

Copilot Cowork runs multi-step tasks across Microsoft 365 and returns a finished result. For a firm, that can mean drafting internal memos, summarizing documents, or organizing matter files.

It is grounded by Work IQ, which uses context from Outlook, Teams, and Excel. It runs in the background with checkpoints for your review.

Cowork shows recommended actions and applies them only after you approve. That review step is essential when the work touches client matters.

• Draft internal memos and summaries
• Summarize and organize documents
• Run tasks in the background with approval checkpoints

Confidentiality and Privilege Cautions

Client confidentiality and privilege apply to anything Cowork touches. You must control which matters and documents it can access.

Use access controls so Cowork only reaches files for matters it should handle, and keep ethical walls intact between matters.

Verify legal citations and facts in any Cowork draft. AI can invent cases and quotes, which has led to sanctions in real filings.

• Restrict Cowork access by matter and document
• Preserve ethical walls and conflicts checks
• Verify every citation and quote before filing
• Keep privileged material out of tasks that are not properly scoped

Controls Microsoft Provides

Copilot Cowork runs within Microsoft 365's security and governance boundaries, so identity, permissions, and compliance policies apply by default.

Microsoft states that sensitivity labels are inherited and displayed end to end and that actions and outputs are auditable, which supports confidentiality reviews.

Microsoft Purview is available to govern and audit Cowork, including audit logs and eDiscovery. Confirm which protections apply in your tenant.

Licensing and Billing

Copilot Cowork requires a Microsoft 365 Copilot license per user and then bills the Cowork work by usage in Copilot Credits.

Cowork is off by default. An admin must enable it and can set spending limits and choose which models and plugins are allowed.

Microsoft sets credit rates and they can change, so confirm current pricing with Microsoft before you budget.

A Careful Rollout

Start with internal, non-privileged tasks so you can see how Cowork plans and acts.

Have your IT and ethics leads review access settings, ethical walls, and approved use cases before any client matter.

Train lawyers and staff on what they may hand to Cowork and on the duty to verify every output.

What you need to run Copilot Cowork for law firms

The first question most law firms teams ask is whether their current setup can handle Copilot Cowork. For the standard cloud version, the answer is usually yes: Copilot Cowork runs on the provider's servers, so the computers and internet connection you already have are enough to start — there is no server to buy and nothing to install across the firm.

What you do need is two things: access (a business plan or the API) and a tool to work in. Whoever wires Copilot Cowork into your workflows will move fastest inside an AI IDE — Cursor is the most popular and connects to Copilot Cowork directly — while the rest of the team uses Copilot Cowork's own apps day to day.

The exception is compliance. If attorney-client privilege and matter confidentiality mean client data cannot leave your systems, the cloud version is off the table and you move to a private, on-prem setup: self-hosting an open-weights model on hardware you control. In practice that is a workstation with a strong GPU (an NVIDIA RTX 4090 build) or a large-memory Mac Studio for mid-size models, or RunPod to rent the same power by the hour. Our open-weights models for business guide walks through the full build.