Microsoft 365 Copilot in Canada: Cost, Licensing and Readiness

Microsoft 365 Copilot puts AI drafting, summarizing and analysis inside Word, Excel, PowerPoint, Outlook and Teams, grounded in your own email, files and meetings. Checked on microsoft.com/en-ca in September 2026, the Microsoft 365 Copilot Business add-on lists at CA$28.50 per user per month paid yearly, sold as an annual commitment, for organizations with 300 or fewer users on a Microsoft 365 for business plan.

Whether it earns that is decided before anyone types a prompt. Copilot reads what each user can already open, so a tenant with overshared folders, three versions of the price list and files still sitting on a local server produces confident answers built on the wrong documents. This guide covers what Copilot actually does, current Canadian pricing and prerequisites, the readiness work that matters, how Microsoft says it handles your data, and a pilot that gives you a real answer.

What Copilot does inside the apps

One naming note first. Microsoft has renamed Microsoft 365 Copilot to Microsoft Copilot, and Microsoft 365 Copilot Chat to Microsoft Copilot Chat, while noting that licences and experiences may still use the older names during the transition. The Canadian pricing pages were still selling “Microsoft 365 Copilot Business” in September 2026, so expect both names in the admin centre and on your invoice.

The paid licence adds the part people actually notice: Copilot answers from your organization’s email, files, meetings, calendars and chats through Microsoft Graph, with Copilot Search and semantic indexing behind it, rather than only from what you paste in. It also brings priority access, which Microsoft describes as faster and more consistent availability during peak periods, and access to agents that use work data.

Copilot Chat versus a paid licence

Microsoft now documents three experiences, and the differences are easy to mix up when a salesperson says the word “Copilot”.

• Copilot Chat (Basic). Included at no additional cost with eligible subscriptions, including Microsoft 365 Business Basic, Business Standard and Business Premium. Grounded in web data. It can use your content only when you upload or paste a file, or work with content already open in Outlook or Teams.
• Microsoft 365 Copilot (Basic). No add-on licence, but standard access to Copilot features inside apps such as Word and Excel, subject to service capacity. Microsoft is explicit that chat experiences in the apps vary by tenant configuration and licence, so check what your own users see rather than assuming.
• Microsoft 365 Copilot (Premium). The paid add-on. Priority access, automatic grounding in organizational data, agents that use work data, admin usage reports, and the SharePoint Advanced Management and Microsoft Purview controls that go with a real rollout.

Practical consequence: Copilot Chat is free intelligence about your own business. Turn it on, tell people what it is, and watch for six weeks. The staff who use it constantly are your paid-licence candidates. The staff who forget it exists would not have used a CA$28.50 licence either.

What Copilot costs in Canada

List prices from microsoft.com/en-ca, checked in September 2026, in Canadian dollars. Taxes may apply and Microsoft changes these regularly, so confirm before you buy.

Copilot Business is the small-business route: Microsoft defines it for organizations with 300 or fewer users holding a Microsoft 365 Business Basic, Standard or Premium licence, supports up to 300 seats per tenant, and says it delivers the same capabilities as the Microsoft Copilot offering. Above 300 users, Microsoft directs you to the Microsoft Copilot plan instead.

Licence and setup prerequisites

Copilot Business is an add-on, so everyone who gets it needs a qualifying base licence. Microsoft lists Microsoft 365 Business Premium, Business Standard, Business Basic, Microsoft 365 Apps for Business and Microsoft Teams Essentials. Beyond licensing, these are the settings that decide whether Copilot appears and works.

That last one catches organizations that tightened Office privacy settings years ago and forgot. So does the Teams transcription requirement, which is both a technical switch and a conversation with staff and clients about what is being recorded.

The readiness work that decides everything

Microsoft’s own guidance is blunt about the dependency: Copilot and agents work best when content is up to date and well governed, because they retrieve data from Microsoft Graph and respect existing permissions and sharing settings. Four problems account for most disappointing rollouts.

Oversharing

Copilot surfaces anything a user can already open. That includes the folder someone shared with the whole organization in 2022 and the link that was set to “Anyone”. Microsoft notes that SharePoint sets sharing to the most permissive option by default. Before rollout, review your sharing settings for SharePoint and OneDrive, set expiry on links, and find the sites shared with everyone in your organization.

Stale and duplicated content

Copilot doesn’t know which price list is current. Sites nobody has opened in three years, four copies of the same policy and an archive of superseded proposals all reduce answer quality. Work out what should be archived or deleted, and give the remaining documents obvious names and one home.

Sensitivity labels

Where content carries a Microsoft Purview sensitivity label that applies encryption, Copilot honours the usage rights: a user needs the EXTRACT right as well as VIEW before the data is returned. Microsoft recommends enabling sensitivity labels for Office files in SharePoint and OneDrive; without that, protection for encrypted files is limited to documents open in Office apps. Microsoft 365 Business Premium includes sensitivity labels and Purview Data Loss Prevention, so on that plan this is configuration work rather than a purchase.

Files that aren’t in Microsoft 365 yet

If your documents still live on a local file server or on people’s desktops, the grounding that justifies the licence has nothing to read. Migrating first is the right order, and our Microsoft 365 migration checklist covers that work. It is also usually the cheaper half of the project.

How Copilot handles your data

These are Microsoft’s own statements from its data, privacy and security documentation, not vendor marketing.

• Training. Prompts, responses and data accessed through Microsoft Graph aren’t used to train foundation large language models, including those used by Copilot. Optional customer feedback isn’t used for training either.
• Permissions. Copilot only surfaces organizational data that a user has at least view permission for, using the same access controls as other Microsoft 365 services. Microsoft puts the responsibility for those permission models on you.
• Storage and discovery. Prompts and responses are stored with your other Microsoft 365 content, encrypted at rest, searchable through Microsoft Purview and eDiscovery, and subject to retention policies. Users can delete their own Copilot activity history from the My Account portal.
• Location. Copilot has been a covered workload in Microsoft’s data residency commitments since March 1, 2024, but Microsoft says customers outside the EU may have queries processed in the US, EU or other regions. The Advanced Data Residency add-on lists Canada as a local region and includes Microsoft 365 Business Basic, Standard and Premium among eligible plans, but requires ADR licences covering 100% of eligible paid seats in the tenant, which makes it an expensive answer for a small business.
• Models. Microsoft offers third-party models within Copilot, including models from OpenAI and Anthropic as subprocessors, and says administrators can decide whether to use them. If you have a policy on subprocessors, this is a setting to review rather than accept.
• Accuracy. Microsoft states that generative AI responses aren’t guaranteed to be 100% factual and positions Copilot as producing drafts for review. Nothing in a licence changes who is accountable for what goes out the door.

A pilot that answers the question

Because the commitment is annual, the pilot has to be designed to produce a decision, not an impression.

1. Pick the people, not the volunteers. Five to ten staff whose week is mostly documents, email and meetings: an owner or manager, someone in sales or estimating, an admin or bookkeeper, and one sceptic. Skip anyone whose day is spent in the field or on the floor.
2. Pick three named tasks. For example: summarize a long client thread and draft the reply, produce meeting notes with owners and dates, and build a first draft of the monthly report. Name them precisely enough that two people would measure the same thing.
3. Take a baseline first. Have the group log how long each task takes, and how often output has to be redone, for two weeks before licences are assigned.
4. Do the readiness work before day one. Sharing review, transcription turned on for the meetings you’ll measure, staff told what’s recorded and retained.
5. Measure at week six and week twelve. Same tasks, same method, plus Microsoft’s Copilot usage reports for active days and prompts per user. Ask one qualitative question: would you give this up?
6. Decide on numbers. Hours saved per person per month against the licence cost, and the share of the group still using it at week twelve. Light users lose their licence at renewal.

When it isn’t worth it yet

Be willing to reach this conclusion. Copilot is a strong product aimed at a particular kind of work.

• Your files aren’t in SharePoint or OneDrive yet. Migrate first, then reconsider.
• You know sharing is a mess and can’t see how bad. On a Business plan without the governance reporting, fix permissions manually before switching on a tool that searches across all of it.
• Your meetings aren’t transcribed and won’t be. A large share of the everyday value disappears with the meeting recap.
• The work isn’t document work. For a trades or production business, a targeted workflow usually beats a per-seat assistant. Our guide to what to automate first covers those.
• The basics aren’t funded. Backup, multi-factor authentication and patching come before a productivity add-on. Our cybersecurity checklist is the shorter list to work through first.

YVR Technology helps small businesses across Greater Vancouver and the Fraser Valley get their Microsoft 365 tenant ready, run a pilot that produces a real number and decide from there. See our AI consulting and AI services page, or contact us to talk it through.