Copilot Business costs $19 per user per month for GitHub Copilot Business, and $21 per user per month for Microsoft 365 Copilot Business (with a promotional rate as low as $18 per user per month through mid-2026). The price you pay depends on which “Copilot Business” product you buy, how you bundle it with an existing Microsoft 365 or GitHub Enterprise Cloud license, and how many premium request overages your team burns through each month.
Microsoft and GitHub sell several overlapping “Copilot” products to businesses, and the naming is a common source of budget surprises. The governing commercial terms sit inside the Microsoft Product Terms, the GitHub Customer Agreement, and the per-tenant ordering documents you sign with a Microsoft Cloud Solution Provider or a GitHub sales rep. If you pick the wrong SKU, you can end up paying a 105% premium (the jump from $19 to $39) for features your developers never use, or paying $30 per seat for a Microsoft 365 Copilot license that your team cannot legally use because the base qualifying subscription is missing.
According to a Microsoft-commissioned IDC study, businesses report an average return of $3.70 for every $1 invested in generative AI, with top performers hitting $10.30 per $1. That ROI math only works if the seat cost is anchored correctly, so this guide walks you through every tier, overage, and contract trap.
Here is what you will learn:
- ๐ต The exact 2026 list price for every Copilot Business SKU across Microsoft and GitHub
- ๐ Three real-world cost scenarios for a 10-seat startup, a 150-seat mid-market firm, and a 5,000-seat enterprise
- โ๏ธ U.S. federal and state legal angles including HIPAA, CCPA, and the Microsoft Copyright Commitment
- ๐งพ Procurement traps like auto-renewal, true-ups, and EA versus MCA-E pricing differences
- ๐ซ Seven common mistakes buyers make, plus a do’s and don’ts checklist for your finance team
The Copilot Business Product Family, Explained
“Copilot Business” is not one product. It is a marketing umbrella that covers at least four distinct paid SKUs sold by Microsoft and GitHub, each with its own base license requirement, overage model, and compliance posture. The four that matter for most U.S. buyers are GitHub Copilot Business, GitHub Copilot Enterprise, Microsoft 365 Copilot Business, and Microsoft 365 Copilot Enterprise. Each sits inside a separate contract tree, and a license for one does not grant rights to the other.
The naming is messy on purpose. Microsoft uses “Business” to signal a sub-300-seat SKU built on top of Microsoft 365 Business Standard or Business Premium. GitHub uses “Business” to mean any organization-managed seat, regardless of headcount, so a 12,000-person global bank can buy GitHub Copilot Business without ever touching Copilot Enterprise. The consequence of confusing the two is a misrouted purchase order, a failed security review, or a double-paid tenant.
GitHub Copilot Business: $19 Per User Per Month
GitHub Copilot Business costs $19 per granted seat per month, billed monthly, with no annual prepay discount. Each seat includes 300 premium requests per user per month, unlimited code completions, policy controls, audit logs, and the IP indemnity that protects your company against third-party copyright claims on generated code.
A “granted seat” means a seat that has been assigned through your GitHub organization’s Copilot settings. If you grant 40 seats but only 22 developers actually sign in, you still pay for all 40. The consequence is silent budget leakage, especially in orgs that use team-based auto-assignment rules.
A common misconception is that GitHub Copilot Business includes GitHub Enterprise Cloud. It does not. You can buy Copilot Business on a free GitHub organization account, but most regulated buyers also pay for GitHub Enterprise Cloud at $21 per user per month to get SAML SSO, audit log streaming, and IP allow lists.
GitHub Copilot Enterprise: $39 Per User Per Month
GitHub Copilot Enterprise costs $39 per granted seat per month. The price jump buys 1,000 premium requests per user per month (up from 300), knowledge base integration that indexes your private repositories, pull request summaries on GitHub.com, and fine-tuned chat that can answer questions about your org’s codebase.
You cannot buy Copilot Enterprise without an underlying GitHub Enterprise Cloud contract. The consequence is a minimum effective price closer to $60 per user per month once the platform seat is layered on, which catches procurement teams off-guard when they budget only the $39 line item.
A real-world example: Priya, a VP of Engineering at a 600-developer healthtech company, budgets $39 ร 600 = $23,400 per month but discovers at contract signature that her Enterprise Cloud platform adds another $12,600 per month, pushing her true Copilot Enterprise cost to $36,000 per month or $432,000 per year.
Microsoft 365 Copilot Business: $21 Per User Per Month
Microsoft 365 Copilot Business costs $21 per user per month, billed annually, after Microsoft permanently cut the price from $30 per user per month on December 1, 2025. A promotional rate of $18 per user per month runs through March 31, 2026 for net-new customers, and a separate SMB promo extends the $18 rate through June 30, 2026 for organizations adding Copilot to an existing Business Standard or Business Premium tenant, according to a Microsoft Tech Community announcement.
This SKU is capped at 300 users per tenant. The consequence of outgrowing the cap is a forced migration to the Enterprise SKU at a higher unit price, plus a rebill of the affected seats at the new rate. A common misconception is that the $21 price includes the base Microsoft 365 subscription. It does not. You still need Microsoft 365 Business Basic, Standard, Premium, or Apps for Business underneath it.
Microsoft 365 Copilot Enterprise: $30 Per User Per Month
Microsoft 365 Copilot Enterprise still lists at $30 per user per month, billed annually, and requires an E3, E5, A3, A5, F3, or Office 365 E3/E5 base license. Month-to-month billing adds a 20% premium, pushing the price to roughly $31.50 per user per month for tenants that refuse annual commitments.
The consequence of choosing Enterprise over Business when your headcount is below 300 is roughly $108 per user per year in extra spend for features that rarely matter to small teams, such as cross-tenant Copilot Studio agents and elevated Microsoft Purview retention controls.
Copilot Business Pricing At A Glance
The table below is the fastest way to sanity-check a vendor quote before it hits your procurement queue. Every row reflects U.S. list pricing as of April 2026.
| Plan | List Price | Seat Cap |
|---|---|---|
| GitHub Copilot Business | $19 per user per month source | None |
| GitHub Copilot Enterprise | $39 per user per month source | None |
| Microsoft 365 Copilot Business | $21 per user per month source | 300 users |
| Microsoft 365 Copilot Enterprise | $30 per user per month source | None |
| Copilot Pro (individual, not business) | $10 per user per month source | 1 user |
Three Cost Scenarios That Mirror Real Buyers
Abstract list prices rarely match the invoice. The three scenarios below walk through the total monthly cost for a small startup, a mid-market firm, and a global enterprise, including base license stacking and overage math. Every dollar figure uses the published 2026 rates and assumes a 12-month annual commitment.
Scenario 1: 10-Seat Startup With GitHub Copilot Business
| Line Item | Monthly Cost |
|---|---|
| GitHub Copilot Business, 10 seats at $19 | $190 |
| GitHub Team plan, 10 seats at $4 | $40 |
| Estimated premium overage, 400 requests at $0.04 | $16 |
| Total monthly spend | $246 |
Marcus, a cofounder at a 10-person YC-backed SaaS startup, lands at $246 per month or $2,952 per year. He skips GitHub Enterprise Cloud because SOC 2 Type II is not yet required by his customers, and he accepts the GitHub Team plan as his platform floor.
Scenario 2: 150-Seat Mid-Market Firm With Microsoft 365 Copilot Business
| Line Item | Monthly Cost |
|---|---|
| Microsoft 365 Business Premium, 150 seats at $22 | $3,300 |
| Microsoft 365 Copilot Business, 150 seats at $21 | $3,150 |
| Copilot Studio packs, 1 at $200 | $200 |
| Total monthly spend | $6,650 |
Aisha, an IT director at a 150-person regional law firm, pays $6,650 per month or $79,800 per year once Copilot Studio agents are added for intake automation. The firm stays under the 300-seat cap, so the Business SKU remains the right call.
Scenario 3: 5,000-Seat Enterprise With Mixed Copilot Enterprise
| Line Item | Monthly Cost |
|---|---|
| Microsoft 365 E5, 5,000 seats at $57 | $285,000 |
| Microsoft 365 Copilot Enterprise, 3,000 seats at $30 | $90,000 |
| GitHub Copilot Enterprise, 600 dev seats at $39 | $23,400 |
| GitHub Enterprise Cloud, 600 seats at $21 | $12,600 |
| Total monthly spend | $411,000 |
David, a procurement lead at a 5,000-employee bank, cuts a $4.93 million annual check for Copilot across the full workforce. He rations Copilot Enterprise seats to 3,000 knowledge workers and 600 developers, rather than the full 5,000, because usage telemetry during the pilot showed only 62% of eligible users opening Copilot in a given week.
Premium Requests and Overage Pricing
Every Copilot Business seat includes a monthly allotment of “premium requests,” which are the higher-cost model calls routed to Claude, GPT-5, or Gemini instead of the base GPT-4.1 class model. GitHub Copilot Business includes 300 premium requests per user per month, and GitHub Copilot Enterprise includes 1,000. Overage requests are billed at $0.04 each.
Starting June 1, 2026, GitHub is migrating from request-based billing to usage-based billing for organizations and enterprises. The consequence of this change is that a heavy agent-mode user who previously consumed 30 premium requests per task may see that same task measured in tokens, which can raise or lower the effective per-task cost depending on model choice.
A common misconception is that Microsoft 365 Copilot has a comparable overage fee. It does not. Microsoft 365 Copilot is flat-rate per user, with no per-query or per-token overage, although heavy users of Copilot Studio agents consume message packs that start at $200 per 25,000 messages per month.
Legal, Privacy, and Compliance Cost Drivers
Price is only half of a Copilot Business purchase. The federal and state legal framework around AI-generated output, customer data, and export control can add real dollars to the total cost of ownership. The sections below cover the biggest U.S. legal angles that change the math.
Federal Copyright and the Microsoft Copilot Copyright Commitment
The Copilot Copyright Commitment is Microsoft’s promise to defend paid Copilot customers against third-party IP lawsuits arising from generated output, and to pay adverse judgments if the customer used the product’s built-in content filters. The GitHub equivalent is baked into the Business and Enterprise SKUs but excludes the free and Pro tiers.
The consequence of ignoring the commitment’s guardrails is lost indemnity. If you disable Copilot’s duplicate-detection filter and a court finds your generated code infringes a GPL-licensed project, Microsoft or GitHub can refuse coverage. A common misconception is that the commitment extends to your customers who use your Copilot-generated software. It does not, and your downstream users may still sue you directly.
HIPAA and the Business Associate Agreement
Microsoft 365 Copilot is covered under the Microsoft HIPAA Business Associate Agreement when purchased under a qualifying enterprise agreement. GitHub Copilot Business is not covered by a HIPAA BAA, because source code is not protected health information in most engineering contexts.
The consequence of routing PHI through GitHub Copilot chat is a potential HIPAA violation with civil monetary penalties ranging from $141 to $71,162 per violation in 2025-adjusted figures. A mini-scenario: Elena, a hospital CTO, blocks Copilot chat from pasted patient records by enforcing Microsoft Purview DLP policies that intercept HL7 message patterns before they reach the model.
California Consumer Privacy Act (CCPA) and State Laws
The CCPA as amended by CPRA treats AI-inferred personal data as protected personal information. Microsoft and GitHub both sign data processing addenda that route Copilot Business traffic through tenant-scoped compute, but the customer remains the “business” for CCPA purposes and is responsible for honoring deletion and opt-out requests.
New York, Colorado, Connecticut, Texas, and Virginia have each passed comprehensive privacy statutes with similar hooks. The consequence of skipping a state-law analysis is that a consumer-facing feature built on Copilot may trigger an opt-out banner requirement under California’s Automated Decisionmaking Technology rules effective in 2026.
Export Control and the EAR
Export Administration Regulations restrict the transfer of certain AI models and training data outside the United States. Microsoft sells a sovereign cloud variant of Copilot for regulated buyers, at a premium that typically runs 15-25% above commercial list.
The consequence of using the commercial Copilot tenant for ITAR-controlled engineering data is a potential criminal penalty up to $1 million per violation and a 20-year prison exposure for the responsible officer. A named example: Carlos, a defense contractor program manager, routes his design team onto Microsoft 365 GCC High instead of commercial Copilot.
Procurement Traps That Quietly Raise the Price
Every Copilot Business contract contains clauses that can turn a clean $19 or $21 seat price into something far larger. The traps below show up in real invoices and are usually missed by buyers who focus only on the per-seat line item.
Auto-Renewal and Price-Increase Clauses
Both the Microsoft Customer Agreement and the GitHub Customer Agreement default to auto-renewal at the then-current list price. The consequence is that a team locked in at a promotional $18 per user per month rate can quietly renew at $21 or even $30 without a written notice loud enough to stop the charge.
A common misconception is that the 30-day cancellation window is triggered by the invoice. It is triggered by the renewal date, which can be 30 to 90 days earlier depending on SKU.
True-Ups and Overage Catch-Up Billing
Enterprise Agreements include an annual true-up that reconciles actual seat usage to the subscribed count. If your tenant added 120 seats mid-year and forgot to report them, the true-up bill lands as a lump sum at the next anniversary.
The consequence is a surprise invoice that can be 10-20% of annual spend. A named example: Jordan, a finance manager at a 400-person SaaS firm, gets a $78,000 true-up bill after engineering quietly provisioned 310 additional Copilot Business seats during a hiring sprint.
EA vs. MCA-E Pricing Differences
The legacy Microsoft Enterprise Agreement is being phased out in favor of the Microsoft Customer Agreement for Enterprise (MCA-E). EA pricing is locked for three years, while MCA-E pricing can move annually, subject to a 5% cap for most SKUs in 2026.
The consequence of migrating from EA to MCA-E without renegotiating is price creep of 3-7% per year on Copilot seats. A common misconception is that volume discounts follow the customer. They reset with each new contract vehicle.
Mistakes to Avoid When Buying Copilot Business
Buyers routinely leave money on the table or create compliance exposure by skipping steps that a disciplined procurement process would catch. The list below covers the seven mistakes that show up most often in post-purchase audits.
- Confusing GitHub Copilot Business with Microsoft 365 Copilot Business. The products solve different problems, and a misrouted PO can take 60 days to unwind.
- Paying for Copilot Enterprise when Business is sufficient. The $20 per-seat gap on GitHub and the $9 gap on Microsoft add up fast without a documented feature requirement.
- Forgetting the base license requirement. A Microsoft 365 Copilot Business seat without an underlying Business Standard or Premium license is non-functional and non-refundable.
- Over-provisioning seats to entire departments. Microsoft’s own telemetry shows roughly 40% of assigned seats go unused in month one, so a phased rollout protects budget.
- Ignoring premium request overages. A single enthusiastic developer in agent mode can burn 2,000 premium requests in a week, triggering an $80 overage on top of the $19 seat.
- Skipping the HIPAA BAA negotiation. Covered entities that deploy Copilot without an executed BAA face direct HHS OCR enforcement.
- Missing the auto-renewal notice window. A 30-day cancellation clock that starts 90 days before anniversary is easy to miss, and rebates for mis-renewed seats are rare.
Do’s and Don’ts for Copilot Business Buyers
A short checklist beats a 60-page policy document when procurement is under time pressure. The do’s and don’ts below distill the guidance above into action items your finance and IT teams can execute in a single sprint.
Do:
- Do match the SKU to the actual use case, meaning GitHub for developer workflows and Microsoft 365 for knowledge-worker productivity, because mixing them without mapping creates ghost seats.
- Do negotiate a price-lock clause for 24 or 36 months, because MCA-E pricing can move annually and a lock caps your exposure.
- Do pilot with 10-20% of eligible users for 60 days before a full rollout, because usage data reveals the true adoption rate and prevents over-provisioning.
- Do sign the Copilot Copyright Commitment-compatible filter policy before production use, because the indemnity depends on default filters staying on.
- Do require an executed HIPAA BAA in writing for any tenant that may touch protected health information, because verbal assurances do not survive an OCR audit.
Don’t:
- Don’t assume the promo rate will renew at the promo rate, because Microsoft’s permanent list price is $21 per user per month and promos expire.
- Don’t grant Copilot seats to every employee on day one, because the 40% idle-seat rate is real and the money is better spent on training.
- Don’t ignore the Copilot Studio message-pack meter, because heavy agent usage can double the monthly bill.
- Don’t run ITAR or CUI workloads on commercial Copilot, because only GCC High carries the right controls.
- Don’t pay for GitHub Copilot Enterprise without pairing it with GitHub Enterprise Cloud, because the Enterprise features cannot activate without the platform seat.
Pros and Cons of Paying for Copilot Business
The decision to buy is rarely pure. The table of trade-offs below helps finance, legal, and engineering align on whether the seat cost matches the expected productivity lift.
Pros:
- Measurable productivity gains of 26-55% on developer tasks, per GitHub’s 2024 productivity study, which supports the $19 price tag for most engineering orgs.
- IP indemnity that transfers downstream copyright risk to Microsoft or GitHub, which in-house counsel typically values at several multiples of the seat price.
- Flat per-user pricing that makes budgeting predictable, in contrast to token-based rivals where monthly spend can swing 3-5x.
- Tight integration with existing Microsoft 365 or GitHub estate, which reduces change-management cost by avoiding new identity providers.
- Enterprise-grade audit logs and policy controls that satisfy SOC 2, ISO 27001, and FedRAMP evidence requirements.
Cons:
- Price still exceeds rivals such as Amazon Q Developer Pro at $19 and Tabnine Enterprise at $39, with some teams preferring those ecosystems.
- 40% idle-seat problem, meaning buyers routinely pay for licenses that sit unused for weeks.
- Premium request overages can be unpredictable in agent-heavy workflows, and the June 2026 move to usage-based billing adds more variability.
- HIPAA and ITAR workloads require separate cloud tenants at higher prices, which complicates the single-vendor narrative.
- Vendor lock-in risk, since migrating off Microsoft 365 Copilot means reworking Word, Excel, and Teams prompts across the organization.
How to Enroll and Provision: The Step-By-Step
The mechanical steps below describe what a buyer actually does after signing an order form. Each step has a downstream consequence if skipped, so treat the list as sequential rather than optional.
- Validate your base license coverage in the Microsoft 365 admin center or your GitHub Enterprise billing dashboard, because Copilot seats will not activate without the right floor.
- Execute the order form through your CSP, LSP, or direct Microsoft rep, because pricing and terms vary by channel.
- Assign seats inside Microsoft 365 Copilot admin or GitHub organization settings, because unassigned seats still bill but deliver no value.
- Configure tenant-level Copilot policies, because default policies can permit more data sharing than your compliance team wants.
- Turn on usage analytics, because visibility into adoption rates is the single best predictor of ROI.
- Schedule a 60-day and 180-day review, because most over-provisioning is caught in those windows and seats can be reassigned or dropped.
Key Entities You Should Know
A Copilot Business purchase touches a small network of companies, products, and laws. The names below are the ones that appear most often in an executed contract package.
- Microsoft Corporation is the seller of Microsoft 365 Copilot and the parent of GitHub, and the contracting party on your MCA-E.
- GitHub, Inc. is the seller of GitHub Copilot Business and Enterprise, and signs a separate customer agreement even if Microsoft is your reseller.
- OpenAI supplies the GPT-class models that power most Copilot inference, under a capacity-reserved commercial arrangement with Microsoft.
- Anthropic and Google supply the Claude and Gemini models available as premium-request options inside GitHub Copilot.
- HHS Office for Civil Rights enforces HIPAA against covered entities that misuse Copilot with PHI.
- California Privacy Protection Agency enforces CCPA and ADMT rules against businesses that deploy Copilot on California resident data.
- Bureau of Industry and Security enforces EAR controls against exporters that route controlled technical data through commercial Copilot.
Recent Rulings and Regulatory Signals
Copilot litigation is young but the signals so far affect how you should price risk. In Doe v. GitHub, Inc., a putative class of open-source developers sued over Copilot’s use of public code for training, and the Northern District of California dismissed most claims in 2024 while letting a narrow breach-of-open-source-license theory proceed. The consequence for buyers is that the IP indemnity remains commercially important, because plaintiff theories are still evolving.
The FTC’s 2024 “Operation AI Comply” sweep and the 2025 follow-up signal that advertising ROI claims for AI tools can draw enforcement. The consequence is that internal business cases should cite Microsoft’s IDC-funded numbers as estimates, not guarantees, when communicated to shareholders.
FAQs
Is Copilot Business cheaper than Copilot Enterprise?
Yes. GitHub Copilot Business is $19 per user per month, while Copilot Enterprise is $39. Microsoft 365 Copilot Business is $21 per user, compared with $30 for the Enterprise tier.
Does Copilot Business include the base Microsoft 365 license?
No. You must separately buy a qualifying Microsoft 365 plan such as Business Standard, Business Premium, E3, or E5. Copilot Business is strictly an add-on.
Is GitHub Copilot Business HIPAA compliant?
No. GitHub does not sign a HIPAA Business Associate Agreement for Copilot Business. Covered entities handling protected health information should route workflows through Microsoft 365 Copilot with an executed BAA instead.
Can I pay for Copilot Business month-to-month?
Yes. GitHub Copilot Business bills monthly with no annual commitment. Microsoft 365 Copilot Business defaults to annual billing, though month-to-month adds roughly a 20% premium.
Does Copilot Business protect me from copyright lawsuits?
Yes. Both Microsoft and GitHub extend their Copilot Copyright Commitment to paid Business and Enterprise customers, provided you keep the default content filters turned on.
Is there a seat minimum for Copilot Business?
No. GitHub Copilot Business has no minimum, and Microsoft 365 Copilot Business starts at a single seat, although the SKU is capped at 300 users per tenant.
Do I lose premium requests if I do not use them?
Yes. Unused premium requests expire at the end of each calendar month and do not roll over, so right-sizing seats matters for cost control.
Can I mix Copilot Business and Copilot Enterprise in one org?
Yes. GitHub explicitly allows mixed deployments across organizations within a single enterprise account, which helps match seat cost to actual developer needs.
Does Copilot Business train on my private data?
No. Microsoft and GitHub both contractually commit that Business and Enterprise customer data, including prompts and suggestions, is not used to train foundation models.
Are there discounts for nonprofits or education buyers?
Yes. Microsoft offers nonprofit pricing through Microsoft Philanthropies and education pricing through Microsoft 365 A-SKUs, typically 20-50% below commercial list.
Does canceling Copilot Business delete my chat history?
Yes. Microsoft retains Copilot interaction data for 30 days after cancellation in most tenants, after which it is purged under the standard data deletion commitments.
Can I resell Copilot Business seats to my customers?
No. Both the Microsoft Customer Agreement and the GitHub Customer Agreement prohibit resale of Copilot seats without a separate ISV or CSP channel agreement.