AI Governance in Microsoft 365: What You Need to Consider Before Rolling Out Copilot
There’s a moment that happens in almost every Copilot conversation.
Most organizations discover they have a Microsoft 365 storage problem in one of two ways. Procurement asks why a line item that did not exist two years ago is now material, and whether it will keep growing. Or a user cannot upload a file because the site they work in has gone read-only and nobody told them it would.
Neither of those is really a storage problem. Both are the visible end of decisions made somewhere else: how sites get created, how people share, what retention requires, and what nobody has been asked to decide. The bill is where those decisions surface. It is not where they were made, and it is not where they can be fixed.
This is the first of four posts drawn from a longer guide I have written on Microsoft 365 storage optimization, which we will publish shortly after the series ends. It covers why storage has become a budget line, and why the obvious responses keep failing.
📢 Upcoming Webinar – November 5: Your M365 Tenant is a Storage Unit (And You're Paying Rent on Junk)
Is your Microsoft 365 storage bill growing? Join us to uncover what's driving storage costs across your tenant and how smarter governance can help you take control. Register Now →
For most of the last decade, Microsoft 365 storage behaved as though it were free. It never was, but the entitlement was generous enough that nobody had to think about it. Microsoft did not change the deal. The volume caught up with it.
The way overages are paid for is also changing. Microsoft has a pay-as-you-go meter for additional SharePoint storage in public preview, a OneDrive equivalent entered preview in September 2026, and Message Center currently puts general availability for both in November and December 2026. Metered billing is convenient. It also means growth stops hitting a wall and instead arrives as an invoice. Oftentimes, hitting that limit was the only moment that forced somebody to actually review what was filling your storage quota.
A tenant receives a base allocation of SharePoint storage plus an increment for each eligible license. The formula is simple and has been stable for years, but two features of it catch people out.
The first is that the increment is per license, not per person, and not every license carries one. Frontline plans contribute nothing beyond the tenant base. An organization with three thousand frontline staff and a thousand knowledge workers has roughly the storage entitlement of an organization with a thousand people. A forecast built on headcount is wrong on the day it is signed.
The second is that because the entitlement scales with license count, it can shrink. Reduce headcount in a restructure and the allocation drops while the content stays exactly where it was. Some organizations discover a storage problem they did nothing to create.
Before you forecast anything, confirm which of your own license types actually contribute. It takes minutes, and it is one of the most common costing errors in this area.
Storage growth is usually described as one trend. There are four; they have different owners, and they compound.
Content growth is the one everyone expects: more people, more files, larger files. It is usually legitimate, and it belongs to the business.
Version growth is not proportional to anything. A single heavily edited file can hold hundreds of versions, of which perhaps three have any recovery value. It is generated automatically by ordinary work, governed by a setting most organizations have never revisited, and it is frequently the largest single recoverable component of a tenant.
Retention accumulation is growth caused by a control working correctly. When content under retention is deleted, it is not removed. It moves to a preservation location that still consumes quota. A maturing compliance program should be expected to increase consumption, not reduce it.
Duplication belongs to nobody. Sync conflicts, attachments sent instead of links, migration staging folders that were never cleared, and the folder called "old" that somebody created during a reorganization in 2021.
The compounding matters more than any single curve. Versioning applies to duplicated content. Retention captures duplicates and their versions. A careless copy made in year one is still being preserved, versioned and paid for in year five.
The storage fee is the visible cost. The rest is real, but it lands in other budgets, and nobody adds it up.
The AI line has changed the politics of this work. The remediation needed to make an estate safe for Copilot (reducing oversharing, labeling sensitive content, removing obsolete material, establishing ownership) is substantially the same work. Only the sponsor changes, and the AI sponsor usually has a larger budget. If your AI program is funded and your governance program is not, they should be the same program.
Four responses get tried first, and each fails in a predictable way.
Buy more capacity. It works immediately, and sometimes it is the right answer, when growth is legitimate, understood and forecast. When you cannot say what the content is, who owns it and why it is kept, you are not buying capacity. You are buying time at a recurring price and not using the time. The organizations in real difficulty are the ones that bought it three times without ever establishing what was in it.
Run a clean-up campaign. A good campaign produces a real reduction, and a graph that dips once and then resumes exactly the slope it had before. Clean-up changes the level. Only governance changes the slope.
Turn versioning down. The instinct is sound, because version history is usually the biggest recoverable slice. Acted on without analysis, it trades a cost problem for a recovery problem. On content under a retention policy or a hold, it reclaims nothing at all while appearing to succeed. Part 4 of this series will explain why.
Move it all to Azure. Cheaper storage is real. But moving content out of Microsoft 365 does not remove your obligations. It transfers responsibility for meeting them from Microsoft to you, and several of the controls people assume will travel do not.
None of these needs a tool.
Quick answer
Why is my Microsoft 365 storage bill growing?
Four curves drive it: content growth, version history, retention accumulation, and duplication. They compound. Start by confirming which license types add to your SharePoint entitlement, then find your own overage rate in the admin center. Buying capacity buys time; governance changes the growth rate.
Microsoft 365 storage cost is a governance outcome. It responds to governance interventions and is largely immune to procurement interventions. The rest of this series will cover what those governance interventions are.
Microsoft 365 Governance
365Gov Score scores the governance conditions behind storage growth: ownership, lifecycle and retention coverage across SharePoint, OneDrive and Teams.
Each tenant gets a base allocation plus an increment for every eligible license. Microsoft has published that as 1 TB per tenant plus 10 GB per eligible license for several years, but check the current SharePoint service description before you forecast on it. Count the licenses that contribute, not your headcount.
No. Frontline plans contribute nothing beyond the tenant base allocation. A tenant with 3,000 frontline staff and 1,000 knowledge workers has roughly the entitlement of a 1,000-person organization, which is why storage forecasts built on headcount are wrong from the start.
Sites go read-only, and users usually find out when an upload fails. If the whole tenant exceeds its entitlement, the restriction spreads until you buy capacity or reduce what you hold. Pay-as-you-go billing removes that hard stop and replaces it with a monthly charge that grows quietly.
Content under a retention policy or a hold moves to a preservation location when it is deleted, and that location still counts against your quota. A working compliance program should raise storage use. Check which sites are under retention before a clean-up, so you know where deletion will actually reclaim space.
Often, because version history is usually the largest recoverable slice of a tenant. Cut it without analysis, and you swap a cost problem for a recovery problem. On content under retention or a hold, it reclaims nothing while appearing to work. Decide which content needs deep history first, then set limits.
The storage itself is cheaper. Your obligations move with the content, and responsibility for meeting them shifts from Microsoft to you. Several controls people assume will travel do not. List the controls you rely on today and how each one will work in Azure before anything moves.
Copilot surfaces anything a user can technically reach, so obsolete and overshared content becomes one prompt away. Making a tenant safe for Copilot means reducing oversharing, labeling sensitive content, removing obsolete material, and establishing ownership, which is largely the same work as storage governance. Fund and run them as one program.
Next in the series: one number, seven components. What your storage figure is actually made of, and why the pile you cannot classify is bigger than you think.
M365 + Security MVP | Blogger | Podcaster | Speaker | Founder, CEO - YModernize
Alistair has worked in various capacities in multiple verticals from retail-manufacturing to government, spanning 50 to 50000 users utilizing all aspects of pure Enterprise Information Management.
Specialties: 20+ years pure IT, 16 years ECM, Livelink, Zylab, SharePoint, FileNet, etc. IT Pro dabbling in Dev, ECM Consultant, Suffering from Technophilia. Technology Architect specializing in Business Productivity Enrichment.
There’s a moment that happens in almost every Copilot conversation.
This past May at the 2026 Microsoft 365 Community Conference in Orlando, I joined Jay Gundotra,...