Microsoft
Conflict of interest. This site uses Claude, by Anthropic, to read and summarise texts; Anthropic is one of the companies on this page. Claude gives no judgements or rankings. The categories of the Seoul safety frameworks (e.g. «does not cover severe risks») come from Claude's reading of the documents: the document is linked on each company's page.
1 · Who it is
- Headquarters
- United States · United States
- Why it is on this page
- signed the Seoul commitments (May 2024)
- Latest releases
- 36 models released in the last 24 months
- MAI-Cyber-1.1-Flash 27 Oct 2026
- MAI-Image-2.7 27 Oct 2026
- MAI-Base-2 15 Oct 2026
- MAI-Transcribe-2-Streaming 1 Oct 2026
- MAI-Voice-2.1 1 Oct 2026
2 · What it promised
Public commitments and signature status. Official lists have no dates: for names that appeared after our first reading of the list, the day we first saw them.
- signed
- signed
- signedFrozen archive: lists read from copies and articles on 26 October 2026 (the archive did not respond), to be rechecked.
- signedList of submitted reports read on oecd.ai, without automated collection; report texts are not republished (all rights reserved).
- not applicableList read on AGORA (ETO/CSET, CC BY-NC, no automated collection) and copied into the file. The WeChat original cannot be opened by programs.
- EU AI Pact (opens in a new tab)25 Sep 2024signed
3 · What it wrote and changed
Under the Seoul commitments the companies promised to publish, by the Paris summit (10-11 February 2025), a safety framework on severe risks, with the thresholds beyond which they consider them intolerable.
safety framework published
- First version
- 8 Feb 2025
- Latest version
- Feb 2026 · 2 versions found
- Risk thresholds
- the document contains risk thresholds This only says whether the document contains thresholds, not whether they are adequate.
Search by Claude of the company's websites on 27 Oct 2026, still to be checked again by a person.
Documents tracked over time
Versions of the text found in the copies of the Wayback Machine and Open Terms Archive: each point is a version that differs from the previous one.
Safety policy
Frontier Governance Framework (February 2026) (opens in a new tab)
Choose a point to read what changed.
First version seen on 24 Apr 2026
This version: archived copy (Wayback Machine) (opens in a new tab)
Usage policy
Microsoft Enterprise AI Services Code of Conduct (opens in a new tab)
Choose a point to read what changed.
Minor change on 5 Aug 2026
Only dates, version numbers or a few words: no summary.
Previous version: archived copy (Wayback Machine) (opens in a new tab)Later version: archived copy (Wayback Machine) (opens in a new tab)
Minor change on 3 Jul 2025
Only dates, version numbers or a few words: no summary.
Previous version: archived copy (Wayback Machine) (opens in a new tab)Later version: archived copy (Wayback Machine) (opens in a new tab)
First version seen on 28 Feb 2025
This version: archived copy (Wayback Machine) (opens in a new tab)
Terms of service
Copilot Terms of Use (opens in a new tab)
Choose a point to read what changed.
First version seen on 24 Nov 2025
This version: Open Terms Archive (opens in a new tab)
Privacy policy
Microsoft Privacy Statement (opens in a new tab)
Choose a point to read what changed.
Minor change on 30 Jan 2026
Only dates, version numbers or a few words: no summary.
Previous version: Open Terms Archive (opens in a new tab)Later version: Open Terms Archive (opens in a new tab)
Minor change on 8 Dec 2025
Only dates, version numbers or a few words: no summary.
Previous version: Open Terms Archive (opens in a new tab)Later version: Open Terms Archive (opens in a new tab)
Minor change on 24 Nov 2025
Only dates, version numbers or a few words: no summary.
Previous version: Open Terms Archive (opens in a new tab)Later version: Open Terms Archive (opens in a new tab)
First version seen on 11 Nov 2025
This version: Open Terms Archive (opens in a new tab)
Summaries by Claude, checked by a person; the text of the documents belongs to the company: read it through the links.
4 · What others say
Stanford Foundation Model Transparency Index
Not rated in the edition used (Dec 2025) of Stanford's Foundation Model Transparency Index.
Data: Stanford CRFM, CC BY 4.0 licence · data and method (opens in a new tab)
Ratings by others: see SaferAI, risk management (opens in a new tab). Link only: their scores cannot be republished without permission.
Each rating measures different things on different companies: they are not comparable with each other.
5 · What happened
Incidents in which the company is named as developer of the system (AI Incident Database and AIAAIC).
- last 6 months
- 1
- last 12 months
- 7
- last 24 months
- 32
Severity, last 24 months: serious 2 · moderate 20 · minor 7 · not rated 3
- The Sydney Morning Herald and The Age Removed an Opinion Article After Undisclosed Copilot Use (opens the Australia page)
- AI chatbots lure vulnerable gamblers to unlicensed betting websites (opens the Austria page)
- Prominent AI Chatbots Allegedly Produced Incorrect UK Financial and ISA Guidance (opens the United Kingdom page)
- West Midlands Police Reportedly Relied on Erroneous Copilot-Generated Intelligence in Maccabi Tel Aviv Away-Fan Ban Decision (opens the United Kingdom page)
- Microsoft's Windows Recall Allegedly Stores Passwords and Social Security Numbers in Preview Mode
- Microsoft 365 Copilot Vulnerability Allegedly Allowed File Access Without Audit Log Entry
- Reported Public Exposure of Over 100,000 LLM Conversations via Share Links Indexed by Search Engines and Archived
- Multiple LLMs Reportedly Generated Responses Aligning with Purported CCP Censorship and Propaganda
- Chatbots Allegedly Reinforced Delusional Thinking in Several Reported Users, Leading to Real-World Harm
- Government‑Backed AI4Peat Mapping Tool Allegedly Misidentifies Granite Outcrops and Quarries as Peat (opens the United Kingdom page)
- Microsoft Copilot Reportedly Able to Access Cached Data from Since-Private GitHub Repositories
- MyPillow Defense Lawyers in Coomer v. Lindell Reportedly Sanctioned for Filing Court Document Allegedly Containing AI-Generated Legal Citations (opens the United States page)
- Alleged Inclusion of 12,000 Live API Keys in LLM Training Data Reportedly Poses Security Risks
- Study: AI chatbots fail to summarise news accurately
- Top chatbots tricked into generating instructions on how to enrich uranium
- AI data centres spike electricity costs in Maryland, New Jersey (opens the United States page)
- Social work AI transcription tools wrongly indicate suicidal ideation (opens the United Kingdom page)
- Microsoft Copilot generates fake comments by a Russian leader on the death of a Russian opposition politician
- Top AI image generators produce misleading election info (opens the United States page)
- NYC AI chatbot tells businesses to break law (opens the United States page)
- Chatbots misinform citizens about European Parliament elections
- Google, Microsoft image searches list nonconsensual deepfake porn (opens the United States page)
- UK watchdog investigates Microsoft Recall AI feature (opens the United Kingdom page)
- The Center for Investigative Reporting sues Microsoft, OpenAI for AI copyright violations (opens the United States page)
- ChatGPT, Copilot repeat false claim about US presidential debate (opens the United States page)
- Microsoft Copilot can be turned into automated phishing machine
- Kroger under fire for AI-powered dynamic pricing (opens the United States page)
- Microsoft Mekaguda data centre allegedly dumps industrial waste (opens the India page)
- Microsoft app accused of enabling employee mobile surveillance
- AI search engines promote white supremacism (opens the Kenya page)
- Microsoft AI Recall feature found to capture credit card numbers
- Microsoft Querétaro AI data centre linked to water shortages, power outages, illnesses (opens the Mexico page)
All incidents mentioning Microsoft, in Explore incidents →Where the harm happens, in Connections →
6 · What we cannot see
- internal documents and unpublished safety evaluations;
- versions of documents that no archive saved;
- “no document found” is the result of a search, not proof that the document does not exist;
- signatory lists often have no dates: the date is the day we first saw the name;
- incidents the press does not report: the best-known companies have more recorded incidents because they are talked about more;
- many incidents do not have a severity yet;
- Chinese companies publish less in English and some of their commitments are read from third-party sources (AGORA).