The short answer

Yes, Microsoft processes your OneDrive files to power AI features. No, they do not read your personal files for advertising. The reality sits in the space between those two statements, and understanding that space is what matters for your privacyprivacy decisions.

What Microsoft actually does with your files

Microsoft's privacyprivacy policy for OneDrive describes several categories of data processing that go beyond simple storage:

• AI-powered search and discovery: OneDrive's Discover feature analyzes your files to surface relevant content. This is content processing, not just indexing.
• Microsoft Copilot in OneDrive: The Copilot integration reads and processes file content to answer questions and generate summaries. This is documented AI processing of your files.
• Content indexing: Microsoft indexes your files for search functionality. This is standard practice across all cloud storage providers and is not uniquely invasive.
• Spam and malware scanning: Microsoft scans uploaded files for security threats. This is standard, automated, and not a privacy concern in the traditional sense.

What Microsoft does not do

• Sell your file data: Microsoft does not sell your OneDrive content to advertisers or third parties.
• Serve targeted ads from file content: OneDrive does not use your file content to serve advertising.
• Share file content with government on demand: Without a valid legal process, Microsoft will not provide file content to authorities. With a legal process, they can and will.

The Copilot question

Microsoft Copilot in OneDrive is the feature that generates the most concern, and the concern is legitimate. When Copilot is enabled, it reads your file content to generate responses. This is not background indexing — it is active processing of your documents, spreadsheets, and files.

The key setting to check is in your Microsoft 365 privacyprivacy dashboard. You can limit how Copilot uses your data. However, Microsoft's enterprise agreements and US legal obligations mean that data processed through Copilot may still be subject to government access requests under US law.

The encryption reality

OneDrive uses Microsoft-managed encryption keys, not zero-knowledge encryption. This means Microsoft can technically access your file content. They have policies against doing so without legal justification, and their enterprise agreements include data processing commitments. But the architectural capability exists.

For comparison, fii.one uses zero-knowledge encryption where only you hold the keys. Microsoft cannot access your file content, even technically, because they never receive the decryption capability. This is an architectural difference, not just a policy difference.

How to limit Microsoft's file processing

• Go to your Microsoft privacy dashboard and disable Copilot data processing
• Turn off OneDrive Discover if you do not use it
• Use Microsoft 365 admin controls to manage AI feature access for your organization
• Consider moving highly sensitive files to a zero-knowledge provider if Microsoft's data processing is a concern

Compare: fii.one vs OneDrive.

Frequently asked questions