Copilot - Security and Availability

What’s the current status of Procore Copilot?

Procore Copilot, announced during Groundbreak 2023 is in open beta. The open beta is available to customers in the United States using Procore in English who license the required toolset. 

Customers using Procore in English in Canada, the United Kingdom and Ireland, Australia, and New Zealand who license the required toolset are eligible to participate in a Closed Beta. Contact your Procore point of contact to request access to the closed beta.

How can my company participate in the Open beta program? 

To learn if the beta is available to your company, visit your Company Admin tool and look for the option to sign the beta agreement. Then, follow the steps in Enable Copilot to start participating.

Which third party generative AI technologies does Procore Copilot utilize?

Procore Copilot currently utilizes Microsoft’s Azure OpenAI Service. Microsoft Azure OpenAI is a listed Procore subprocessor. 

Does Microsoft Azure OpenAI use customer data to train their AI models? 

No, customer data is not used to train, retrain, fine-tune, or improve Microsoft Azure OpenAI or any other Microsoft products or services, and is not provided to OpenAI. Additionally, the indexed data sent to the LLM is not persistently stored by Microsoft, only the prompts and responses are stored securely for up to 30 days by Microsoft to detect and mitigate abuse. You can learn more about how Microsoft uses prompts and data by reviewing Microsoft's Data Privacy and Security for Azure OpenAI page. 

How do other AI models besides the LLM, used by Procore Copilot utilize customer data?

In addition to Azure OpenAI, Procore Copilot also utilizes internal AI models that help it better understand user inputs and prioritize relevant search results, improving the overall user experience. These internal models may utilize data collected from customer inputs and outputs to help improve Copilot accuracy. Procore never shares or discloses a customer’s data with another customer, and that includes customer prompts to Procore Copilot and Procore Copilot’s responses. Due to the nature of machine learning and the technology powering Procore Copilot, output may not be unique, and Procore Copilot may generate the same or similar output for third parties.

How does Procore Copilot follow permissions in our Procore instance?

We've designed Copilot to strictly adhere to existing data permissions set in Procore. Copilot’s responses (output) are based only on data that the user can access based on these set permissions. As an example, if a user does not have access to the RFIs tool at all (based on the settings in the permissions tool), and they ask a question related to a specific RFI, then they would not get any answer based on RFIs.