Your team has been using Azure OpenAI for three months. Everything works. Then someone runs a security review and asks a simple question: where does the prompt data go? You pull up the docs and find out that every Copilot prompt—containing your internal service names, API patterns, and architectural …