- Copilot can now plan and carry out multi-step tasks directly in Word, Excel, and PowerPoint, and turn a meeting recording into a short narrated recap in Outlook and Teams.
- Through Copilot Studio you can build agents that follow defined workflows, surface interactive approval screens in chat, and even operate other apps by controlling a browser or desktop.
- Microsoft released Agent 365, a control plane to see what agents exist, what they can access, and what they're doing, because agents are now part of your access-control and security exposure.
- Copilot now runs on more than one underlying AI model, so quality keeps improving without you changing anything and shouldn't be judged by the version you tried a year ago.
If you've used Microsoft 365 Copilot, Microsoft's AI assistant, as a smarter search-and-draft box, the 2025 and 2026 updates are a bigger deal than they look. The product is shifting from something you ask to something that does multi-step work for you. For a business owner, that shift brings real upside and a new responsibility.
Copilot now works inside the apps, end to end
The headline change: Copilot can now plan and carry out multi-step tasks directly in Word, Excel, and PowerPoint, not just answer a single prompt. Draft a document from a brief, build out an analysis in a spreadsheet, or assemble a deck, with Copilot doing the steps and you steering. In Outlook and Teams it's aware of your inbox and calendar, and it can turn a meeting recording into a short narrated recap instead of a wall of notes.
Why it matters: this is where the time actually goes for most knowledge workers. Moving Copilot from "answer my question" to "do the first draft of the task" is where the productivity shows up.
The bigger shift: agents that take action
Microsoft is pushing hard on "agents," which go a step past Copilot. Through Copilot Studio, its agent-building tool, you can stand up agents that follow defined workflows, surface interactive screens right inside Copilot chat (review data, approve a request, update a record in place), and even operate other applications by controlling a browser or desktop app on a user's behalf.
A practical way to think about an agent: it's less like a chatbot and more like a junior employee who handles a defined process. That framing also tells you the catch. You have to onboard it, give it the right access, and supervise it, exactly like a new hire.
The new responsibility: governing your agents
Here's the part that's easy to miss. Once your company starts using agents, you have a new category of thing to manage. Microsoft released Agent 365, a control plane meant to give you one place to see what agents exist, what they can access, and what they're doing. For an SMB, the lesson isn't "buy the enterprise governance tool tomorrow." It's that agents are now part of your access-control picture and your security exposure, and they need the same discipline you apply to user accounts.
A note on the AI underneath
Microsoft now lets Copilot run on more than one underlying AI model, so the engine behind the assistant keeps improving without you changing anything. That's a reason not to judge Copilot by the version you tried a year ago; the quality has moved.
What to do about it
Pick one repetitive, rules-based process, an approval, a routine report, a standard intake, and pilot a single agent or Copilot workflow on it with one team. Measure whether it saves time and whether people trust it. Treat any agent you deploy like a user account: give it least-privilege access and keep an eye on it. Expand from what works.
If you're trying to separate the Copilot hype from what's genuinely useful for a company your size, and do it without opening a security gap, we're glad to help you sort it. Let's talk it through.