How Synthetic Enterprises Build Trust in Microsoft Copilot

Image for From synthetic enterprise data evaluations to real Microsoft Copilot AI confidence - Microsoft Research

Step-by-Step Teaching

Step 1: Understand the Core Problem First

Before anything else, you need to grasp why this system exists.

The Central Tension

NEED:                              CONSTRAINT:
Test AI against realistic    VS.   Real enterprise data is
enterprise scenarios               sensitive and cannot be used

Real enterprise data includes:

  • Employee communications
  • Financial records
  • Medical/legal documents
  • Personally identifiable information (PII)

The consequence without a solution:

  • Teams test AI against generic, unrealistic benchmarks
  • Domain-specific failures go undetected
  • Example: A generic benchmark won't catch that Copilot mishandles a clinical trial safety review summary

Key Insight

Generic testing ≠ Enterprise-grade confidence. You need realistic data that is also completely safe to use.


Step 2: Understand the Solution Framework

Microsoft built the Industry Evaluation Data Generation Platform, built on three pillars:

PillarWhat It Does
Synthetic Enterprise EnvironmentsSimulates entire organizations with users, emails, meetings, documents
Automated Query Generation PipelinesCreates realistic test questions at scale
Structured Quality FrameworksEnsures the synthetic data is good enough to matter

Think of it like this:

Pillar 1: Build a fake company  →  Pillar 2: Ask it real questions  →  Pillar 3: Verify it's realistic enough

Step 3: Learn How Synthetic Environments Are Built

3a. What Is a "Tenant"?

A tenant = one simulated organizational workspace with:

  • Its own users
  • Its own data
  • Its own configurations
  • Complete isolation from real data

3b. Grounding in Real-World Public Data

The environments feel realistic because they are anchored to real-world signals — but only from publicly available, legally approved sources:

Data SourceWhat It Contributes
O*NET (U.S. Dept. of Labor)Realistic job roles, responsibilities, work activity frequencies
Online Job PostingsRole titles, reporting hierarchies, department structures
SEC FilingsOrganizational scale, business unit structures, financial context

Why this matters: Without grounding, synthetic data looks artificial. With grounding, it mirrors how real organizations actually operate.

3c. The Temporal Dimension (Often Overlooked)

Environments are not static snapshots. They simulate:

  • Email threads developing over weeks
  • Project timelines evolving
  • Organizational changes unfolding naturally

Why this is critical:

Many real Copilot queries are time-aware:

  • "What did the team decide last Thursday?"
  • "What's changed since the last quarterly review?"

These questions only produce meaningful evaluations if the underlying data has genuine time structure.

3d. Three Industry-Specific Environments

IndustrySimulated Scenarios
PharmaceuticalRegulatory submissions, clinical trial discussions, safety review meetings
Capital MarketsDeal pipelines, compliance communications, portfolio reviews
IT/SoftwareSprint planning, code reviews, product launch coordination

Why industry-specific? Generic test cases miss domain-specific failure modes. A capital markets failure looks completely different from a pharmaceutical one.


Step 4: Learn How Evaluation Queries Are Generated

Having a synthetic environment is not enough. You also need realistic questions to ask it.

The Problem with Manual Query Writing

  • Prohibitively expensive
  • Slow
  • Doesn't scale across industries

The Six-Stage Automated Pipeline

Stage 1: Large library of generic workplace tasks
         ↓
Stage 2: Filter to industry-relevant tasks
         ↓
Stage 3: Adapt using domain-specific language and context
         ↓
Stage 4: AI generates queries grounded in the synthetic environment's actual data
         ↓
Stage 5: Rewrite queries to sound natural and human
         ↓
Stage 6: Validate each query for accuracy and uniqueness

Output: A rich set of high-quality, lifelike, industry-specific evaluation queries — generated automatically and reproducibly.


Step 5: Understand How Quality Is Validated

Generating synthetic data is only valuable if it's good enough to produce meaningful evaluations. Quality is measured across four dimensions:

DimensionQuestion It Answers
Structural FidelityDoes the org chart look like a real company? (team sizes, hierarchies, cross-functional relationships)
Contextual RelevanceAre queries representative of actual enterprise usage?
Behavioral RealismDo simulated users communicate and collaborate like real humans?
Content SafetyIs the data free of harmful content, PII, and real individual impersonation?

Quality Results Achieved

  • 39% improvement in composite quality scores vs. initial approach
  • Some industry environments scored above 0.9 out of 1.0

Step 6: Understand Why Automation Is Non-Negotiable

Without full automation, four practical problems emerge:

ProblemConsequence
ReproducibilityManual processes produce slightly different results each time → can't compare across releases
ScaleToo many industry variants for any team to produce manually
Iteration SpeedManual creation takes days → slows development feedback loops
Cross-Team ConsistencyDifferent teams produce incompatible formats and quality levels

Impact of Automation

  • Dataset creation: multi-day manual process → automated pipeline runs
  • Estimated savings: ~$100,000 per dataset / $300,000 total project savings
  • More importantly: any team can regenerate identical results from the same configuration

Step 7: Understand Privacy and Safety by Design

This is not just a feature — it is the foundational design principle that makes everything else possible.

Non-Negotiable Rules

  • Zero real customer data at any stage of the pipeline
  • Every element (org structures, emails, meeting transcripts) is synthetically generated
  • All content is safety-screened for harmful material and PII

Specific Safeguards

  1. Privacy-preserving aggregation (real-world statistics referenced, not copied)
  2. Expert legal review of all public data sources
  3. Clear data provenance and lineage tracking throughout

Why This Enables Adoption (Not Just Compliance)

Because data is synthetic + safety-screened:
→ Teams can share and reuse freely
→ No privacy review overhead
→ No data handling restrictions
→ Faster iteration across all teams

Key insight: Privacy-by-design is not a constraint. It is what makes broad organizational adoption possible.


Step 8: Connect It All — The Big Picture

Here is how all the pieces work together:

PUBLIC DATA SOURCES (O*NET, Job Postings, SEC Filings)
              ↓
    SYNTHETIC ENTERPRISE ENVIRONMENTS
    (3 industries, temporal structure, realistic orgs)
              ↓
    AUTOMATED QUERY GENERATION PIPELINE
    (6 stages: generic → grounded → validated)
              ↓
    QUALITY VALIDATION FRAMEWORK
    (structural, contextual, behavioral, safety)
              ↓
    STANDARDIZED EVALUATION BASELINE
    (shared catalog, cross-team reuse, reproducible)
              ↓
    CONFIDENCE IN MICROSOFT COPILOT
    (without ever touching real customer data)

Step 9: Understand the Broader Significance

What This Solved

  • Established the first standardized evaluation baseline for Microsoft Copilot
  • Shifted teams from ad hoc, manual processes to standardized, reproducible infrastructure

What Comes Next (Open Challenges)

These are the frontier questions the team is now tackling:

ChallengeWhy It's Hard
Multi-turn agentic interactionsAI takes sequences of actions, not just single responses
Long-term organizational dynamicsSimulating months/years of evolution
Action-taking AI evaluationAssessing systems that do things, not just generate text

Summary: What You Should Now Know

ConceptYou Should Be Able To...
Core problemExplain the tension between realistic testing and data privacy
Platform structureName and describe the three pillars
Synthetic environmentsExplain how they are grounded, why temporal structure matters, and what industries are covered
Query pipelineDescribe the six stages and why automation is necessary
Quality frameworkName the four quality dimensions and what each measures
Privacy designExplain why privacy-by-design enables adoption rather than limiting it
Business impactQuantify the efficiency gains and organizational shift achieved

More to study