Microsoft 365 Copilot is bringing its PowerPoint capabilities to GCC High environments, enabling users to create, edit, and refine presentations through natural language directly inside their decks. Users can ask Copilot to generate slides, update content, improve layouts, and polish design while preserving existing formatting, structure, and branding — with brand kit integration available for applying branded templates and brand-approved images. For GCC High organizations that have been waiting on feature parity with commercial Microsoft 365, this update brings one of Copilot’s most visible productivity capabilities into the government cloud. The feature is currently in development and expected to begin rolling out in September 2026.

Microsoft Purview Endpoint DLP is expanding to monitor and protect sensitive data transferred from managed endpoints over FTP and SFTP, closing a long-standing gap in data exfiltration coverage. Organizations gain visibility into file transfers using these protocols and can apply DLP policies to prevent unauthorized movement of sensitive content, extending the same level of control already in place for other data channels. For GCC High environments where data leaving the boundary through less-monitored pathways is a real compliance risk, this update brings file transfer protocols under the same governance umbrella as email, SharePoint, and OneDrive. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft Purview is adding AI-powered investigation for Endpoint DLP policy sync and device health, giving admins visibility into whether DLP protection is actually deployed and enforced across their devices. The system proactively identifies impacted devices, explains the root cause of sync failures, and recommends specific actions to resolve issues — closing the gap between assuming devices are protected and confirming it. For organizations managing DLP at scale, this update turns a previously manual troubleshooting process into a guided, AI-assisted diagnosis. The feature is currently in development and expected to begin rolling out in August 2026.

Microsoft 365 Copilot is expanding declarative agent capabilities to GCC High and DoD environments, enabling agents to move beyond question-answering into direct task execution. Using API plugins, MCP tools, and enterprise connectors, declarative agents can invoke external systems, create records, submit requests, and trigger business processes within a single conversational flow. The Copilot platform dynamically reasons over available actions and selects the appropriate tool to fulfill user intent — enabling multi-step workflows without leaving the chat experience. The feature is currently in development and expected to begin rolling out in June 2026.

Microsoft 365 Copilot is expanding declarative agent capabilities to GCC High and DoD environments, enabling agents to move beyond question-answering into direct task execution. Using API plugins, MCP tools, and enterprise connectors, declarative agents can invoke external systems, create records, submit requests, and trigger business processes within a single conversational flow. The Copilot platform dynamically reasons over available actions and selects the appropriate tool to fulfill user intent — enabling multi-step workflows without leaving the chat experience. The feature is currently in development and expected to begin rolling out in June 2026.

Microsoft Purview Insider Risk Management now allows investigators to create cases without immediately downloading content, removing a bottleneck that previously tied case creation to content availability. A new active case limit of 2,000 gives compliance teams significantly more capacity to triage and track potential insider risk events — particularly useful when content download is unnecessary or when teams need to preserve case records while managing download limits. Content download can be initiated at any point while a case remains active, keeping investigations flexible without sacrificing thoroughness. The feature is currently rolling out for GCC High environments.

Microsoft Purview is expanding Data Loss Prevention enforcement to Microsoft 365 Copilot in government cloud environments, enabling real-time controls that prevent Copilot and agents from returning responses when prompts contain sensitive data. When a prompt triggers a DLP policy, Copilot is blocked from using that sensitive data for grounding in Microsoft 365 or the web — stopping potential data leakage at the point of interaction rather than after the fact. This capability extends to Microsoft 365 Copilot and agents built in Copilot Studio published to Microsoft 365 Copilot, giving GCC High organizations enforceable guardrails as Copilot adoption expands into regulated workflows. The feature is currently in development and expected to begin rolling out in June 2026.

Microsoft Purview is expanding sensitivity label enforcement in Word, Excel, and PowerPoint to block all connected experiences that analyze content — closing a gap where previously only a subset of these experiences were restricted. When the “Prevent some connected experiences that analyze content” label setting is applied, files are now prevented from being sent to any Microsoft connected experience for analysis, giving organizations stronger and more consistent control over how labeled content is processed. For GCC High environments where data boundary enforcement is a compliance requirement, this update ensures sensitivity label policy intent is fully honored across the Office application suite. The feature is currently in development and expected to begin rolling out in June 2026.

Microsoft Purview Data Risk Assessments now support item-level investigation and remediation of SharePoint data, giving admins direct visibility into which items are at risk of oversharing alongside sensitivity label and sharing link details. From a single interface, admins can resolve overshared items, notify stakeholders, apply sensitivity labels, or remove sharing links for selected content — moving from insight to enforcement without leaving Purview. For GCC High environments where ensuring sensitive data is accessible only to authorized users is a compliance requirement, this update closes the gap between identifying exposure and acting on it. This feature is currently rolling out and expected to complete in April 2026.

Microsoft Purview is introducing a major evolution of Data Security Posture Management, delivering a unified experience that brings together visibility and control across both traditional data environments and AI-driven workflows. The new DSPM experience features outcome-based guided workflows that help security teams prioritize risks and move faster from insight to remediation, with Security Copilot agents available to automate tasks like triage and policy management. Coverage now extends beyond Microsoft data with third-party signals from partners including BigID, Cyera, OneTrust, and Varonis — giving teams a single view of sensitive data across clouds and platforms. Additional enhancements include AI observability, Data Risk Assessments extended to Microsoft Fabric, and bulk remediation of overshared SharePoint links. The feature is currently in development and expected to begin rolling out in July 2026.