Your AI App Is Changing. The New One Takes Personal Logins

Your company’s Copilot is quietly becoming a different app this month — and the new one lets people sign into their personal Microsoft account one click from the work one. The risk won’t look like a breach. It’ll look like somebody using the company’s AI tool.

Originally published as The Decision Layer, Issue 16 (week of September 7, 2026). References to “this month” and “this week” reflect that period.

HEADLINE STORY

Sometime this month the Copilot icon on your people’s computers will change, and the program behind it will quietly become a different program. Most of your team will not notice. The one thing they should notice is that the new version lets them sign in with their personal Microsoft account right next to the company one, in the same window, one click apart.

Microsoft has been clear that the two sides stay separate. Company data does not cross into the personal side, and your protections still apply on the work side. Nearly every article I read this month repeated that and stopped. It says nothing about what happens when your employee steps across it himself.

Here is what that looks like at a lumberyard. A salesman pastes a customer’s bid package into the personal side of the app. He has not broken into anything. He picked the wrong account in a program IT installed for him. On the work side, what he typed and what came back are logged, retained under your rules, and can be produced later. On the personal side none of that exists. Nothing logged, nothing retained, nothing to hand over when a customer or an attorney asks a year from now what happened to that file.

That failure will not look like a violation. It will look like somebody using the company’s AI tool.

Back in August I wrote that personal accounts were a policy problem waiting to happen. Most yards never had to answer it, because the line held on its own. Personal tools lived on personal phones, and nobody had to write anything down. That is what changes this month.

THE OTHER HALF

Most of your people have never used AI at work, and it is not because they are resistant. It was never in front of them. It lived in a browser tab somebody had to go find, or behind a license they were told the company did not buy. Starting this month it is an icon on the taskbar next to Outlook, and when they click it, it opens.

Be careful what you promise them about it. You will see the phrase “free Copilot” used this month for three different products. The one included with a Microsoft 365 business subscription cannot see your files, your email, or your Teams messages. Your people have to paste the material in or upload it. That still cleans up a quote letter or summarizes a long spec sheet, and it runs inside your company’s protections. The version that reads your server runs $21 per user per month for companies under 300 people, discounted to $18 for the first year through December 31.

So the same month you tighten the account question, put the tool in front of somebody on purpose. Pick one person in the office or at the counter who writes a lot and has been curious. Give him one job to do with it every day for two weeks, then ask him what it was actually good for. That is a cheaper and more honest test than any rollout plan.

THREE MOVES

Ask your IT provider one question this week. Most yards run their Microsoft setup through an outside firm. Ask him whether the new Copilot is going to install itself on your computers or whether you are controlling when. Microsoft gives him the ability to hold it, stage it, or let it go. He can answer in a sentence. If he cannot, that is its own finding.
Decide whether personal Microsoft logins belong on company computers, and put the answer in writing. Yes or no. Your IT provider can lock it either way once you have decided. What he cannot do is decide for you, and what you cannot do is rely on what you told everybody last spring.
Fix the names. Microsoft renamed two products at once, and says the old names will keep appearing on screens and licenses for months. Anything in your AI policy or new-hire packet using the old names is out of date. While you are in there, add the sentence people will actually use: company work goes in the account marked Work.

WATCH

Epicor’s CEO change takes effect October 1. Vaibhav Vohra, currently president, replaces Steve Murphy. Vohra ran product and technology, which is where BisTrack’s cloud and AI roadmap lives. If you are still on BisTrack Desktop, the migration timeline is the fall conversation to have with your rep.
The AI companies are talking about slowing down, and that is not your problem. OpenAI’s CEO said this week a 2026 public listing would be ill-advised and pointed to 2027, citing safety work. Anthropic’s CEO published an essay the same weekend arguing the industry should pace itself. You will hear about this for weeks. The tools already on your desks are further ahead than anything your company uses, and a slower frontier does not change that by a dollar. What will reach you is how these companies pay for the pause, and that arrives as per-seat pricing, usage limits, and metered features. Put one question on your renewal calendar: what changed in the pricing and the limits since last year, and what are we now paying for by the transaction instead of by the seat.