Copilot Flex Routing: How Microsoft sends your EU data to America
From April 17, 2026, Microsoft enables Flex Routing for all EU and EFTA tenants by default. The name sounds like a minor technical thing. It is not. It is a fundamental decision about data sovereignty — and most admins have not looked at it yet.
The tricky part: Microsoft expects you to check the setting yourself and decide if it fits your organisation. If you don’t look, it is on. And then Copilot might be processing your prompts in the US, Canada, or Australia — without anyone actively agreeing to that.