Skip to main content
Cloud & Microsoft 3658 min readNew

Microsoft 365 Copilot for small business: what it actually does, what it costs, and whether it's worth it

"Copilot costs $18-32 per user a month on top of your Microsoft 365 licence, and the return swings from 132% to 353% depending almost entirely on whether anyone senior actually uses it. What it does, what it costs for a real team, and the permissions audit worth doing before you switch it on."

Author

Lior Refael

Published

Aug 2, 2026

Back to Articles

What Copilot actually does

Microsoft 365 Copilot is a paid AI assistant layered on top of the Microsoft 365 apps you already use. Inside Word, Excel, PowerPoint, Outlook, Teams and SharePoint, it drafts and rewrites documents, summarises long threads and files, spots trends in a spreadsheet, and transcribes, translates and summarises Teams meetings[1]. It also handles some of the repetitive admin work nobody enjoys - generating a first-draft report, drafting a follow-up email, pulling together a summary of what was decided in a meeting you missed[1].

What it is not: a separate database, a search engine with its own index of your company, or something that "knows" more than the people using it. It works inside the apps you already have, on the files and messages those apps already show a given user.

Real examples from Microsoft's own case studies give a clearer sense of scale than the feature list does. One marketing team went from three hours to as little as 30 minutes drafting a campaign brief. A customer-feedback review that used to take three or four hours now takes under one. A content team cut production time from weeks to days[1]. None of those numbers will match your business exactly, but they're the shape of what changes: less time on the first draft, more time on the judgement call that comes after it. The reason that lands is where the week already goes: McKinsey's work on knowledge work put roughly a fifth of the working week into searching for internal information and chasing the colleagues who have it[2].

What it costs, for a real team

Copilot is not sold on its own any more. It sits on top of a Microsoft 365 Business plan, and for new customers it now only comes bundled with one[3]:

  • Business Standard + Copilot: about $23.50 per user, per month, billed annually.
  • Business Premium + Copilot: about $32 per user, per month, billed annually.
  • Standalone Copilot Business add-on, for businesses that already hold a qualifying licence: $18 per user, per month, promotionally through 30 September 2026, reverting to $21 after[3].

For a 10-person team on Standard, that's roughly $235 a month, or about $2,820 a year, on top of whatever the base Microsoft 365 licence already costs. On Premium it's closer to $320 a month. Both bundles cap out at 300 users per tenant[3] - past that you're into Enterprise licensing, a different conversation.

That's the whole cost. There's no separate infrastructure to run, no server to patch, no consultant needed to "install" it. The only real cost beyond the licence is the one nobody puts in a pricing table: the time it takes your team to actually change how they work.

Why the return varies so much

Forrester's commissioned study of small and medium businesses using Copilot modelled three scenarios over three years: a low-impact case at 132% ROI, a medium case at 243%, and a high case at 353%, based on a survey of over 200 companies with up to 300 employees[4]. The same study reported new-hire onboarding accelerating by 25%[4].

Two things are worth being honest about before you take that range as gospel. First, it's commissioned by Microsoft and projected - built from financial modelling across risk scenarios, not measured against actual before-and-after deployments[4]. Treat it as a framework for what's plausible, not a guarantee for your business. Independent tracking outside the vendor ecosystem points the same way with narrower numbers: Stanford's AI Index finds business adoption climbing fast, and the productivity gains measured in controlled studies real but smaller than vendor projections[5][6]. Second, and more useful: the range is wide mostly because of adoption, not because of anything the licence does differently at different price points.

Microsoft's own 2026 Work Trend Index, based on a survey of 20,000 full-time knowledge workers across ten countries, found that when a manager actively uses AI themselves and is visibly seen doing it, employees report a 17-point lift in the value they get from it, a 22-point lift in critical thinking about how they use it, and a 30-point lift in trust in agentic AI tools[7]. Workers whose manager creates space to experiment are 1.4 times more likely to become high-frequency users[7].

The lift in AI outcomes when a manager actively models AI use

Percentage-point lift among employees

Reported AI value
Critical thinking about AI use
Trust in agentic AI

The gap between a low and a high Copilot ROI is mostly explained by this, not by the licence tier. Businesses where someone senior visibly uses Copilot see the larger lift across all three measures.

Show the data
Bar chart showing the percentage-point lift in employee-reported outcomes when a manager actively models AI use, from Microsoft's 2026 Work Trend Index: a 17-point lift in reported AI value, a 22-point lift in critical thinking about AI use, and a 30-point lift in trust in agentic AI.
Percentage-point lift among employeesPoint lift when a manager models AI use
Reported AI value17 pts
Critical thinking about AI use22 pts
Trust in agentic AI30 pts

Source: Microsoft WorkLab, 2026 Work Trend Index: Agents, Human Agency, and the Opportunity for Every Organization (2026)

That lines up with what we see on the ground. The businesses that land at the high end of that ROI range are the ones where someone senior actually uses Copilot day to day and says so out loud. The businesses at the low end bought the licences, sent one email about it, and left the team to figure it out alone.

The risk that has nothing to do with Microsoft

The part of a Copilot rollout that goes wrong is almost never Microsoft mishandling your data. Copilot doesn't have its own view of your files - it shows a person exactly what they could already open by browsing to it themselves, using the same SharePoint and OneDrive permissions your business already has in place. If it can't already be opened, Copilot can't surface it either.

Which is exactly the problem. In a lot of small businesses, permissions are looser than anyone realises: the HR folder, the finance folder and the client contracts folder are all visible to "everyone" because nobody ever went back and tightened them after the business grew past a handful of people. Microsoft's own security guidance for Copilot names this directly as a governance problem, building oversharing-detection and policy recommendations into Purview specifically because Copilot makes existing over-permissioning far easier for someone to stumble into[8]. Independent baselines say the same thing without a product to sell - the CIS Microsoft 365 Foundations Benchmark treats default-open sharing and unreviewed permissions as settings to tighten, not preferences to leave alone[9][10].

The fix is not complicated, and it is not Microsoft's job to do it for you. Before turning Copilot on for the team:

  1. Audit existing file permissions in SharePoint and OneDrive - who can actually open the HR, finance, legal and client-data folders today, not who's supposed to be able to.
  2. Restrict the folders that matter to the people who genuinely need them, before anyone gets a Copilot licence.
  3. Turn it on for a pilot group of three to five people, not the whole company at once.
  4. Review what the pilot group actually uses after 30 days, and decide whether to expand from real usage rather than a guess.

None of this is a long project. A permission audit for a 10-person business is a few hours' work, not a few weeks. Skipping it - not the price of the licence - is the mistake that actually costs businesses.

What this actually means for your business

If your team already lives in Microsoft 365, Copilot is very likely worth the cost. The licence isn't the risk. The risk is buying it and letting it sit unused, or switching it on for everyone before checking who can already see what.

Questions we get asked

Sources

Every figure in this article traces back to a named source. Where we quote our own numbers, they come from work we have done with small businesses in Israel and across Europe, and we say so.

  1. Use Microsoft 365 Copilot to drive growth for businesses of all sizes (opens in a new tab)

    Microsoft 365 Blog · Jan 2025

    What Copilot does across Word, Excel, PowerPoint, Teams, Outlook and SharePoint, and the Morula Health, Newman's Own and PKSHA Technology time-savings examples.

  2. The social economy: Unlocking value and productivity through social technologies (opens in a new tab)

    McKinsey Global Institute · 2012, still the most-cited baseline

    Measured share of the knowledge worker's week spent on email, searching for information and chasing colleagues.

  3. Microsoft 365 Business Plans and Pricing (opens in a new tab)

    Microsoft · 2026

    Current per-user monthly prices for the Copilot add-on and the Business Standard and Business Premium bundles that include it, plus the 300-user tenant limit.

  4. Microsoft 365 Copilot drives up to 353% ROI for small and medium businesses (opens in a new tab)

    Microsoft 365 Blog · Oct 2024

    The Forrester-modelled ROI scenarios (132%/243%/353% over three years), the survey population, and the 25% new-hire onboarding acceleration figure.

  5. AI Index Report 2025 (opens in a new tab)

    Stanford Institute for Human-Centered AI (HAI) · 2025

    Independent, non-vendor tracking of business AI adoption and of the measured productivity effects found in controlled studies.

  6. Generative AI at Work (NBER Working Paper 31161) (opens in a new tab)

    National Bureau of Economic Research · 2023

    Peer-reviewed, non-vendor measurement of generative AI productivity effects: a 14-15% average increase in output, concentrated among less-experienced workers - the independent counterweight to any vendor ROI model.

  7. 2026 Work Trend Index: Agents, Human Agency, and the Opportunity for Every Organization (opens in a new tab)

    Microsoft WorkLab · 2026

    The point-lift in reported AI value, critical thinking and trust when a manager actively models AI use, and the 1.4x higher-frequency-user finding, from a 20,000-worker survey across ten countries.

  8. Secure and Govern Microsoft 365 Copilot (opens in a new tab)

    Microsoft Security · 2026

    Microsoft's own framing of oversharing as a named governance risk for Copilot, and the Purview tooling built specifically to detect and flag it.

  9. CIS Microsoft 365 Foundations Benchmark (opens in a new tab)

    Center for Internet Security · 2026

    An independent, setting-level hardening baseline to check your tenant against.

  10. AI Risk Management Framework (AI RMF 1.0) (opens in a new tab)

    NIST · 2023

    A vendor-neutral governance framework for mapping, measuring and managing AI risk - the standard to hold a Copilot rollout against rather than the vendor's own guidance.

Figures last checked 2 August 2026

Not sure if Copilot is worth it for your team?

Book a free 30-minute call. We'll check your permissions, model the real cost for your headcount, and help you run a pilot that actually tells you something.