Executive Summary
- M365 Copilot Chat added to Core Online Services & EU Data Act clauses – increased compliance scope.
- Visual Studio Subscriptions now fall under the MCA – entitlement workflows change.
- Windows 10 ESU now available via CSP – more flexible purchase routes for legacy support.
- Teams API Terms updated to align with EU security requirements.
- New M365 Business Premium Bundles launched – includes Defender, Purview, 300-seat max.
- Windows 365 expands to GCC/GCCH; new DR add-on available.
Microsoft 365 / Copilot
What changed: M365 Copilot Chat added to Core Online Services data-at-rest list with EU Data Act clauses.
Effective date: September 1, 2025
Impact: Higher compliance obligations for regulated sectors; likely scrutiny under EU rules.
Action: Review Copilot data handling; align with industry-specific compliance policies.
Sources: Microsoft Product Terms, Sept 2025
Visual Studio Subscriptions
What changed: Visual Studio licensing moved under MCA.
Effective date: September 1, 2025
Impact: Customers must manage Visual Studio entitlements under new contract terms.
Action: Validate coverage under MCA; update license assignment workflows.
Sources: Microsoft Product Terms, Sept 2025
Windows 10 Extended Security Updates (ESU)
What changed: Windows 10 ESUs now purchasable via CSP.
Effective date: September 1, 2025
Impact: Easier access to legacy support, especially for CSP-managed environments.
Action: Finalise ESU purchasing plan; check if Windows 365/Azure VM is more cost-effective.
Sources: [Certero Aug 2025 Insider]
Teams API
What changed: Terms updated to comply with EU security regulations.
Effective date: September 1, 2025
Impact: Developers and integrators may face stricter data handling or auth requirements.
Action: Review new API terms and developer guidance; assess integrations.
Sources: Microsoft Product Terms, Sept 2025
Microsoft 365 Business Premium Bundles
What changed: New bundles launched for Defender, Purview, and combined suites.
Effective date: September 1, 2025
Impact: Improved value at SMB scale, but limited to 300 seats max.
Action: Check eligibility; ensure deployments respect 300-user cap.
Sources: Microsoft Product Terms, Sept 2025
Windows 365
What changed: Available in GCC and GCCH; DR add-on for Frontline Dedicated mode added.
Effective date: September 1, 2025
Impact: US public sector adoption becomes easier; new DR option for frontline use cases.
Action: Evaluate fit for government workloads; assess DR add-on pricing.
Sources: Microsoft Product Terms, Sept 2025
Joseph Lobo – Consultant
Consultant at Certero with deep expertise in Software Asset Management (SAM) and IT asset governance. Joe advises clients on navigating high-stakes licensing environments, offering detailed insights into deployment reporting formats, processor capacity definitions, and compliance contracts. His guidance helps organizations align governance strategies with modern SaaS and cloud complexities, transforming compliance risk into strategic advantage.
