Integrating Copilot and Nomio
When you connect Copilot to Nomio, you create or update an agent and give it the ability to search the agreements, data points, documents, and clauses in your Nomio repository.
How to connect Copilot
Connecting Nomio and Copilot is straightforward. Follow our setup guide to add Nomio to an agent in Copilot Studio and start searching your contracts from Copilot.
Read the guide →About the integration
Copilot connects to Nomio through the Nomio MCP server, added as a tool on a new or existing agent in Copilot Studio. Once the agent is published, you can ask it questions in plain English from Microsoft 365 Copilot Chat, Teams, or SharePoint, and it searches your repository and answers from the agreements, data points, documents, and clauses it finds there.
Access is read-only and follows your existing permissions: Copilot sees only the agreements you can already see in Nomio, and it cannot edit agreements, change data, or take any action on your behalf.
Security
When you connect a large language model such as Copilot to Nomio, the model requests data through the Nomio MCP server. The same permissions apply as when using Nomio directly: each user can only access the agreements and data they can already see in the Nomio application. If you cannot see something in Nomio, you cannot share it with the model.
Data supplied by Nomio through the MCP server is processed by the model under your terms with the AI provider, not under your agreement with Nomio. Nomio cannot accept liability or responsibility for the AI provider’s actions, including the model’s answers, its availability, or its handling of data.
We strongly recommend connecting Nomio only to a professionally licensed model and reviewing the provider’s legal terms, including where data is processed and whether it is used for model training.
Frequently asked questions
No. Nomio accesses large language models through enterprise (professional) licences with our providers. Under these agreements, the text we send and the answers generated are contractually and technically excluded from training the providers’ models.
Your contract text is never added to a model’s general knowledge, and it cannot surface in answers given to any other customer or organisation.
Processing is transient and stateless. When the assistant needs to read or reason over your contract text, that text is processed in the moment and then immediately discarded: our AI providers keep no copy and do not retain it.
AI processing doesn’t change where your data is stored or how it’s protected: your underlying data stays in Nomio, secured exactly the same as always.
Nomio uses Anthropic (Claude) and Google (Gemini), reached through Google Cloud Vertex AI and Amazon Bedrock under professional licences with zero data retention. Contract text is processed transiently; nothing is persisted by the providers. Stored customer data always remains in the UK.
Because Nomio doesn’t develop its own models, AI governance and accountability are handled within our overarching Information Security programme rather than a separate AI policy.
That programme is independently certified to ISO 27001 standard. You can review our certifications, policies, and live security controls at any time in our Trust Centre.
No. Nomio AI is read-only and works strictly within your own organisation, seeing only the agreements you already have access to.
It answers questions; it cannot edit agreements, change labels or owners, resolve issues, or take any other action on your behalf.
Yes. Your data is encrypted both at rest and in transit. Data at rest is protected with industry-standard AES-256 encryption, and all data moving between you, Nomio, and our infrastructure travels over TLS 1.2+. This applies to your live data and to backups alike.
Encryption keys are held in a managed key-management service with strict access controls and regular rotation, and our cryptography controls are independently audited as part of our ISO 27001 certification. You can find more detail in our Trust Centre.
Most AI tools read straight from raw contract documents, which is where accuracy breaks down. Nomio is different: we’ve spent years building a clean, structured data layer for your contracts, with key terms already captured and verified.
Because Nomio AI works from that foundation rather than messy PDFs, its answers are considerably more accurate than a general-purpose AI tool pointed at the same contracts.
It also grounds every answer in your own data: it reads the actual clauses, captured data points, and tables in your agreements rather than relying on a model’s general knowledge, and it’s designed to tell you when it can’t find something rather than guess.
As with any AI tool, we recommend verifying anything you’ll rely on for an important decision against the source clause.
