Evidence tier Publisher Attested · 7 captures on record
What the publisher says
As described on Microsoft Marketplace.
Coveo brings secure, relevant enterprise knowledge to Microsoft 365 Copilot. It helps users find trusted answers from enterprise content using permission-aware search, relevance-driven retrieval, and retrieval-augmented generation (RAG), powered by the Coveo AI-Relevance Platform.
With Coveo, organizations can extend Copilot experiences beyond Microsoft 365 content by connecting users to knowledge indexed and secured through Coveo. The agent for Microsoft Copilot is designed for enterprise teams that want to improve knowledge discovery, answer generation, and AI-assisted productivity while respecting existing content permissions.
Show the rest of the publisher’s description (11 more lines)
To use this agent, the customer must have an active Coveo account and configure a Coveo organization, a query pipeline, the required organization members, and an MCP server endpoint. Available content, search results, and generated answers depend on the permissions, data sources, indexes, query pipeline, and other configurations established in the customer’s Coveo organization. The agent only returns information that the signed-in user is authorized to access. The customer remains responsible for configuring and administering its Coveo environment and determining which content is made available through the agent.
Terms of Use
Use of this agent and the related Coveo Hosted Services is subject to the Coveo Customer Agreement or, for existing customers, the agreement entered into between the customer and Coveo governing the customer’s subscription to the Coveo Hosted Services.
Privacy
Where Coveo acts as data processor for personal information, such personal information will be processed by Coveo in accordance with Coveo’s Data Processing Addendum or the data processing agreement entered into between the customer and Coveo, if any. Where Coveo acts as data controller for personal information, such personal information will be processed by Coveo in accordance with Coveo’s Privacy Notice.
Not using Coveo yet?
New users can learn more, start a trial, or contact Coveo through the following resources:
- Start a free trial
- Contact Coveo
- Documentation and getting started
- Help and support
Preview
4 images
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
- CSA STARClaimed80%, self-attestedself-attested on the marketplaceas observed 2026-08-25
- ISO/IEC 27001Claimed80%, self-attestedself-attested on the marketplaceas observed 2026-08-25
- ISO/IEC 27002Claimed80%, self-attestedself-attested on the marketplaceas observed 2026-08-25
- ISO/IEC 27017Claimed80%, self-attestedself-attested on the marketplaceas observed 2026-08-25
- SOC 2Claimed80%, self-attestedself-attested on the marketplaceas observed 2026-08-25
- ISO/IEC 27018Claimed80%, self-attestedself-attested on the marketplaceas observed 2026-08-25
- HIPAAClaimed80%, self-attestedself-attested on the marketplaceas observed 2026-08-25
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Sources
Publisher resources
2 linksLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.