A healthcare Copilot rollout requires both Microsoft’s BAA coverage and health system controls. That’s why health systems ask “is Microsoft Copilot HIPAA compliant” before deployment. Microsoft lists Microsoft 365 Copilot and Microsoft 365 Copilot Chat as in-scope services under its HIPAA business associate agreement.