Copilot Studio / Microsoft 365 Agents

Verification notes: Both mcp/a2a flags confirmed accurate via Microsoft Learn docs; MCP support has since expanded to Dynamics 365 MCP servers (ERP, Sales, Customer Service, Business Central) plus MCP apps/Apps SDK support. A2A support moved from public preview to general availability in an earlier pass. Correction this pass: audited moves from false to true. Microsoft 365 Copilot passed its March 2026 ISO/IEC 42001 surveillance/recertification audit with zero non-conformities, and Copilot Studio was explicitly added to the certified scope this cycle — confirmed via Microsoft's own Microsoft 365 Copilot blog post (modified 2026-05-26), corroborated independently by Winbuzzer and Help Net Security. Treat this as a compliance-management-system certification (ISO/IEC 42001, specific to AI management systems), not a full independent security penetration test — a narrower claim than 'independently audited' might imply on its own, which is why evidenceLevel stays at documentation-reviewed rather than moving to independently-audited (that tier is reserved for this site's own confidence in its sourcing, not a statement about the underlying product). Re-checked this pass: Microsoft's own recertification write-up still names Copilot Studio within the certified scope (alongside GitHub Copilot, Dragon Copilot, Foundry, and Security Copilot), corroborated again by Help Net Security. No flag changes.