Architecture overview

[This article is prerelease documentation and is subject to change.]

This article provides an overview of the architecture in Microsoft Copilot for Finance (preview).

Architectural component layers

The architecture consists of the following component layers.

• Admin layer
• Client layer
• Service layer
• Storage and security layer
• Microsoft 365 and Microsoft Office data layer
• ERP data layer

Each layer is described in the following sections.

Admin layer

Copilot for Finance is integrated as copilot extensions within Microsoft Office: Outlook and Excel. The administrative layer of Copilot for Finance provides users with the ability to install and manage these Office add-ins.

Client layer

Copilot for Finance consists of two distinct client experiences - Copilot for Finance for Microsoft Outlook and Copilot for Finance for Microsoft Excel. The Outlook experience is developed as a third-party Outlook add-in and the Excel experience is developed as a third-party Excel add-in.

Both consist of a manifest, which describes how the add-in and app integrate into Outlook and Excel, and JavaScript/HTML, which makes up the User Interface (UI) of the experience. The UI for both experiences is cloud-hosted and fully managed by Microsoft. None of the UI or business logic for Copilot for Finance is shipped as client-side code in Excel or Outlook. Therefore, customers do not need to manage any of the application lifecycle for the Copilot for Finance client or server-side components. See the Application Lifecycle Management section for more details.

The Copilot for Finance clients only store minimal setup and settings data in the local browser-based application storage and no personal or other customer data outside of settings is persisted locally.

Service layer

The Copilot for Finance service layer consists of the Cloud Hosted Copilot for Finance Experiences, which are served to the Copilot for Finance client experiences, and Core Business Logic Layer, which processes and combines ERP data, MS Graph Data (e.g., E-Mails, Meetings), Azure Open AI generated data. All Copilot for Finance services are hosted on the Microsoft Azure cloud to provide a resilient foundation to help meet organizational compliance, reliability, availability, and disaster recovery needs.Data Layer

The Copilot for Finance data layer consists of three distinct sets of data.

• MS Graph Data: The end user’s existing M365/Office Data (E-Mails, Meetings, etc.) are stored in Microsoft Graph.
• ERP Data: The customer’s ERP data is only stored in the existing ERP system (SAP, Dynamics Finance and Operations, …), which serves as the system of record for all ERP entities.
• Non-ERP related data: Copilot for Finance stores some non-ERP related data in customer’s Power Platform Dataverse. e.g. email summaries, emails and notes.
• Copilot for Finance Data: The customer’s Copilot for Finance data is generated through Copilot for Finance feature flows and does not fall into the above definition for “Office Data” or “ERP Data”, “Dataverse data” e.g., Copilot for Finance settings or Copilot for Finance generated insights data.

Storage and security layer

Copilot for Finance always respects the data privacy, data security, data retention, and compliance boundaries of the underlying data store for data at rest and uses Transport Layer Security (TLS) to protect data in transit and does not store data outside any of the data stores described above.

Microsoft 365 and Office data layer

The end-user’s Microsoft 365 and Office data is always accessed in the end user’s authentication context and referenced in two distinct ways:

• Read in real-time to enable insights scenarios, for example Generative AI e-mail replies, AI generated e-mail summaries, etc. The M365 / Office data is only read in these scenarios and discarded after it has been processed.
• Read in real-time to enable value in the customer’s ERP system, for example when e-mail data is copied from the Microsoft Graph to the customer’s ERP as activities or meeting transcripts are copied to Dataverse to enable extensibility scenarios.

ERP data layer

All ERP data access (read and write access) in Copilot for Finance is managed via real-time integrations with the underlying ERP system. Copilot for Finance does not copy any ERP data to other systems except when unique identifiers are used for the purpose of mapping ERP environment and entities to Copilot for Finance specific data. For example, Copilot for Finance customer identifiers are used to map customers to non-financial data stores in Dataverse. In these scenarios, Copilot for Finance only stores the unique identifiers from the ERP system being referenced. Copilot for Finance fully respects the existing retention policies and compliance boundaries of the existing ERP system and Dataverse.

Copilot for Finance is designed and intended to work with a single ERP connection at a time. Copilot for Finance does not connect to multiple ERP or Dataverse instances at the same time, nor synchronize data between them. The data accessed and stored via Copilot for Finance is always scoped to the ERP that the end user is currently connected to.

Application lifecycle management

This section describes the application lifecycle management for Copilot for Finance.

Release cycle

There are two sets of release cycles for Copilot for Finance.

• Bi-Monthly product releases, which include major product capabilities.
• Ongoing service updates, which include product hotfixes and minor product changes.

Component overview

There are two distinct components that are relevant to the Copilot for Finance application lifecycle management.

• Copilot for Finance client add-in / app manifests, which are deployed as third-party Outlook add-in and third-party Excel app and describe the behavior of the add-in / app.
• Copilot for Finance service layer, which hosts the UI experiences for all Copilot for Finance add-ins / apps and the core service layer, containing front-end APIs, core business logic, data integration layer, and AI services.

Updates

Copilot for Finance client add-in and apps

The Copilot for Finance manifests for the Microsoft Outlook Add-In and the Microsoft Excel Add-In require occasional updates when new capabilities are introduced. These updates are rolled out by Microsoft as part of the bi-monthly product releases and will be automatically pushed to all users who have the add-in / app installed without the need for an admin or end-user to take any action. In rare circumstances, Microsoft will introduce new permissions as part of a bi-monthly release, which will require explicit consent and update from the admin or end-user. In these circumstances, admins and users will see that a new update is available via the M365 Admin Center. Additionally, Microsoft will inform admins via the “What’s New” section of the Microsoft Copilot for Finance documentation, and via the Microsoft Viva Blog. Customers will not be able to take advantage of the latest Copilot for Finance capabilities if they have not applied the latest updates to the add-in / app.