Ramp’s AI Index did record 50.4% of businesses on its platform paying for at least one AI product in March 2026, up from 35% a year earlier. But that measures payments among Ramp customers, using corporate-card and invoiced transactions; it is useful evidence of spending behavior, not a census of every American business. Ramp’s own data now shows the share continuing to climb, which makes subscription discovery a current operational problem rather than a quarterly finance exercise.
For Windows administrators, the important correction is this: Copilot Chat is included with eligible Microsoft 365 subscriptions, but it is not a free substitute for every Microsoft 365 Copilot capability. The product names remain confusingly similar, while the permissions, data grounding, controls, and charges behind them are substantially different.
Microsoft’s July changes raised suite prices, not Copilot’s boundaries
Microsoft’s commercial Microsoft 365 price and packaging update took effect on July 1, 2026. In the U.S., annual-commitment list pricing for Microsoft 365 Business Basic rose from $6 to $7 per user per month, and Business Standard rose from $12.50 to $14. Business Premium remained $22. Existing customers stay on their prior pricing until renewal, Microsoft says, so two organizations with the same displayed product name can currently be paying different amounts.
The increase also brought changes to the core suites. Microsoft’s current business-plan comparison lists 100 GB primary Exchange mailbox storage for Business Basic, Business Standard, and Business Premium. That is a meaningful capacity change for Basic and Standard customers who previously had 50 GB mailboxes, but it should not be read as an equal new entitlement across every Business tier: Premium was not part of the July price increase, and its mailbox capacity was already higher.
The more consequential package distinction is between Copilot Chat, available under eligible Microsoft 365 licenses, and Microsoft 365 Copilot, the paid product formerly referred to in many admin discussions as the “full” Copilot. Microsoft’s own documentation describes Copilot Chat as web-grounded by default, whereas Microsoft 365 Copilot can use web information and organizational context and work data through Microsoft Graph.
That distinction determines whether a user can ask broad questions, summarize uploaded material, and draft from public-web research, or whether they can have Copilot locate relevant company documents, reason over mail and meetings they are authorized to access, and work deeply inside Microsoft 365. A user who says they need “Copilot for our files” is asking for something different from a browser chat assistant, regardless of whether both products show a Copilot logo.
Microsoft 365 Copilot Business remains an add-on for organizations with one to 300 users. Microsoft’s public business page advertises a $21 list price per user per month on annual billing, with a $18 promotional rate for qualifying annual purchases during the current offer period. The promotional number is not a durable budgeting baseline: IT should record the renewal rate, promotion expiry, term, reseller conditions, and seat minimum before using it to justify replacing another vendor.
Included chat does not mean included agents
The Spiceworks article blurs an especially important line by placing Word, Excel, and PowerPoint agents alongside the included Copilot Chat experience. Microsoft’s current service description does not support that interpretation. Word, Excel, and PowerPoint Agents are listed as Microsoft 365 Copilot features; the basic Copilot Chat entitlement does not include them.
This is more than a licensing footnote. A department comparing a paid ChatGPT Business workspace against its Microsoft 365 subscription may find that Copilot Chat satisfies basic drafting, web research, and file-upload questions. It should not assume it has received the workflow automation, agentic document creation, tenant grounding, or advanced in-app editing capabilities shown in a Microsoft 365 Copilot demonstration.
Microsoft also distinguishes between direct user features and metered capabilities. Its current plan comparison marks certain offerings, including Copilot Cowork and some agent-related usage, as metered for particular plans. Separately, Copilot Studio and Power Platform scenarios can require Copilot Credits or a linked Azure subscription for pay-as-you-go billing. Those are controllable costs, but they are not seat-license costs, and they deserve their own budget owner and spending limits.
Administrators should therefore avoid publishing a generic “Copilot is free” message. It encourages users to test a feature that may later require a paid license or metered consumption, then frames the resulting procurement request as an IT failure. A better message specifies the approved service, its intended data sources, the permitted sharing behavior, the features that require a Copilot license, and the process for requesting an exception.
Model choice adds a data-governance decision
Microsoft’s expanding use of Anthropic models brings another decision that a comparison based only on price will miss. Microsoft confirms that Anthropic models are available through its commercial services in specified configurations, and that admins can manage access through Microsoft 365 admin-center settings. Availability is not uniform across every cloud and region: Microsoft documents exclusions for federal customers in Government Community Cloud, GCC High, and Department of Defense environments, while EU, EFTA, and UK tenants have separate default and control arrangements.
The major policy issue is data retention. Microsoft says some Anthropic preview models require provider-side retention of prompts and responses, and remain off by default. In those cases, Anthropic acts as an independent data processor rather than simply a Microsoft subprocessor operating under Microsoft’s standard service commitments.
That means an organization cannot treat “Copilot” as one homogeneous data-processing environment. The privacy review must identify the specific model, feature, tenant setting, region, and whether the request invokes an optional preview model with data retention. Turning on a model selector because employees prefer its output is a defensible product decision only after security, legal, and compliance teams understand that difference.
Microsoft’s enterprise data protections still provide a major reason to consolidate general-purpose work chat into an approved tenant service. Microsoft says prompts and responses under enterprise data protection are logged and can be retained for audit, eDiscovery, and supported Purview functions; it also says those prompts and responses are not used to train foundation models. But those protections do not eliminate the need to set access controls correctly. Copilot can only be as safe as the SharePoint, OneDrive, Exchange, and group permissions behind the content it is allowed to retrieve.
Google Workspace has bundled Gemini, but Starter remains a limited tier
Google made a comparable packaging shift earlier, retiring Gemini in Workspace add-ons for new purchases on January 15, 2025 and making the former add-on capabilities available to existing customers without additional cost beginning February 1, 2025. Google’s current terms confirm that Business Starter, Business Standard, Business Plus, and named Enterprise editions include generative AI features and access to the Gemini app and Gemini Notebook where applicable.
The phrase “includes Gemini” still hides material differences. Google’s current business-edition comparison gives Business Starter only standard-level Gemini Notebook access, while Business Standard and Plus receive higher-level access. Several advanced features are unavailable on Starter but included with limits for Standard and Plus: matching writing style and document format in Docs, AI functions and spreadsheet building in Sheets, and larger quotas for Drive organization features.
Google also describes some access as promotional, with enforcement dates attached. Its edition table says Drive’s file-organization limits began enforcement on August 15, 2026, while certain Google Slides and Workspace Studio promotional access is scheduled to change on September 1 and October 1, respectively. A tenant’s experience during a trial period is therefore not a safe indication of what the plan will provide after those dates.
The operational conclusion is that Google Workspace Business Standard can replace a separate AI subscription for some routine drafting, summarization, notebook research, and meeting-related work. It cannot be assumed to reproduce a premium standalone model’s context limits, research modes, coding environment, available models, administration, or usage ceilings. The same warning applies in reverse: a team that requires only Gmail assistance may be paying for a high-end chatbot workspace that delivers little beyond what its Google license already covers.
Make the AI audit a configuration review, not a cancellation campaign
The practical audit should start with invoices and expense data, but it should end in the Microsoft 365 admin center, Google Admin console, identity provider, browser management system, and security logs. Card statements reveal approved purchases; they do not reveal employees using personal accounts, free plans, trial credits, or accounts expensed through another cost center.
Each discovered tool should be mapped to a concrete workload: public-web research, document drafting, meeting notes, spreadsheet analysis, source-code generation, customer-data analysis, or workflow automation. Then record the data classification involved, whether the tool is approved for that class, which identity owns the account, whether SSO and MFA are enforced, whether the organization can export or retain records, and whether the same work is already covered by an existing suite.
This is where consolidation produces actual value. It reduces duplicate spending, but it also narrows the number of vendors receiving employee prompts and company material. IBM’s 2025 Cost of a Data Breach research found that one in five surveyed organizations had experienced a breach linked to security issues involving shadow AI, according to IBM’s reporting on the study. That statistic does not prove every unsanctioned AI service creates a breach; it does show why “the team put it on a card” is not an adequate approval process.
A few specialist subscriptions will survive a serious review. Developers may need tools unavailable in Microsoft 365 or Google Workspace. Analysts may require model-specific research features. Legal, security, or regulated teams may need contractual terms and audit controls beyond a bundled assistant. Those subscriptions should be retained deliberately, with a named owner and a documented reason—not because nobody knew the company already had an alternative.
The next AI request should be evaluated against the tenant’s actual entitlement, not the vendor’s broadest product demo. In August 2026, that means checking whether the request needs web-grounded chat, organizational data grounding, licensed Copilot features, metered agent capacity, or a different vendor altogether. The cheapest duplicate subscription is still more expensive than the feature already paid for, but an “included” chatbot is no bargain if it cannot perform the work the business actually needs.
