# GPT Pro
We understand that our customers need to be confident using GPT Pro, and be aware of our data collection practices. GPT Pro is a Microsoft Teams bot that provides secure, enterprise-grade AI assistance directly within Microsoft Teams, helping users with writing, translation, summarization, and creative tasks through natural conversation.
Note
This section is subject to change and we recommend that you check back quarterly for updates.
# Data Management Practices
Through the implementation of its different features, GPT Pro accesses, processes and stores several kinds of data:
- User profiles
- Conversation history and context
- User interaction logs (anonymized)
- Configuration and preferences
- Marketplace subscription metadata
Here is how we're managing data for these different categories:
| Data | Accessed | Cached | Stored | Backup | Notes |
|---|---|---|---|---|---|
| User profiles | ✔ | ✔ | 🚫 | 🚫 | Read at sign-in via Microsoft Graph (User.Read). Not persisted beyond the active session. |
| Conversation history | ✔ | ✔ | ✔ | ✔ | Bot conversations are stored for audit trail and user history. Stored as long as the subscription is active. |
| User interaction logs | ✔ | ✔ | ✔ | ✔ | Anonymized interaction logs for analytics and performance monitoring. Stored in anonymized form per tenant. |
| User preferences | ✔ | ✔ | ✔ | ✔ | Language, theme, and feature preferences stored for UX customization. Stored as long as the subscription is active. |
| Marketplace subscription metadata | ✔ | ✔ | ✔ | ✔ | Received via Microsoft commercial marketplace SaaS webhooks. Stored for plan, status, and trial tracking. |
| Teams channel context | ✔ | 🚫 | 🚫 | 🚫 | Channel name and ID used for routing. Not persisted to durable storage. |
| Copilot Conversations | 🚫 | 🚫 | 🚫 | 🚫 | No access. No cache. No storage. |
No model training
No customer conversation data is used to train any AI or machine-learning model. GPT Pro only reads from user-provided prompts and generates responses. No conversation content is sent to any third-party model provider beyond the configured LLM, and no Witivio model is fine-tuned, indexed, or otherwise enriched with customer data.
# Tenant isolation
Tenant isolation is enforced in the data layer. Every record that belongs to a customer tenant carries the caller's tenant context, and every query against those records is automatically filtered by that tenant.
# Microsoft Graph
TIP
All permissions are delegated permissions. GPT Pro operates on behalf of the authenticated user.
| Scope | Description | Justification | Admin Consent Required |
|---|---|---|---|
User.Read | Retrieve the properties and relationships of the signed-in user. | Allows GPT Pro to read user information and to identify the caller for personalization. | No |
User.ReadBasic.All | Read basic profile information of all users. | Allows GPT Pro to resolve user context in shared spaces (teams, channels). | No |
TIP
The Microsoft Entra ID Bot ID is: e78f6b53-6e97-4960-bb4b-b6d0f1e83fb9
# Microsoft Teams Bot Configuration
GPT Pro is registered as a Microsoft Teams bot with the following configuration:
| Configuration | Value |
|---|---|
| Bot ID | e78f6b53-6e97-4960-bb4b-b6d0f1e83fb9 |
| Bot Scopes | personal |
| Supported Features | Message notifications, Command lists |
| Messaging | Non-notification bot (handles both messages and commands) |
| Media Support | No files, no video, no calling |
# Bot Commands
The bot exposes command suggestions to users:
- ✨ What can you do?
- ✍️ Help me write a message
- 💬 Summarize this text
- 🧠 Explain something simply
- 📅 Help me organize my day
- 💡 Give me a creative idea
# Architecture and flow diagram
The bot receives messages through the Teams Bot Framework, processes them with configured LLM APIs, and returns results to the user. All communication uses secure HTTPS channels.
# Bot Framework and Authentication
- Bot Framework: Azure Bot Service with Teams channel enabled.
- Authentication: OAuth 2.0 via Microsoft Bot Framework authentication. User tokens are obtained through the Microsoft Bot Framework and validated server-side.
- Token Exchange: GPT Pro can perform on-behalf-of (OBO) token exchange to call Microsoft Graph APIs on behalf of the user for context and user information.
# Resource Endpoints
All traffic from and to the GPT Pro platform uses HTTPS protocol on port 443. Here is a short description of each flow:
| Name | Comments |
|---|---|
gpt.teams-pro.com | Public GPT Pro bot service endpoint. Receives messages from Teams Bot Framework. |
graph.microsoft.com | Microsoft Graph — user profile and context information. |
login.microsoftonline.com | Microsoft Entra ID — token acquisition and validation. |
token.botframework.com | Teams Bot Framework token service for bot authentication. |
smba.trafficmanager.net | Azure Bot Service messaging endpoint. |
*.api.cognitive.microsoft.com or external LLM APIs | LLM provider endpoints (varies by configuration). |
*.applicationinsights.azure.com | Application Insights telemetry (optional). |
admin.teams-pro.com | Admin portal for subscription and configuration management. |
subscriptions.witivio.com | Subscription validation and licensing. |
# Dependencies
# Backend
| Name | Version | Url | Licence |
|---|---|---|---|
| Microsoft.Bot.Builder | 4.21.1 | https://github.com/Microsoft/botbuilder-dotnet | MIT |
| Microsoft.Bot.Builder.Integration.AspNet.Core | 4.21.1 | https://github.com/Microsoft/botbuilder-dotnet | MIT |
| Microsoft.Bot.Builder.Integration.ApplicationInsights.Core | 4.21.1 | https://github.com/Microsoft/botbuilder-dotnet | MIT |
| Microsoft.Identity.Web | 2.13.4 | https://github.com/AzureAD/microsoft-identity-web | MIT |
| Microsoft.Identity.Web.MicrosoftGraph | 2.13.4 | https://github.com/AzureAD/microsoft-identity-web | MIT |
| Microsoft.AspNetCore.Mvc.Core | 2.2.5 | https://github.com/aspnet/AspNetCore | |
| Microsoft.AspNetCore.Http | 2.2.2 | https://github.com/aspnet/AspNetCore | |
| Microsoft.ApplicationInsights | 2.21.0 | https://github.com/Microsoft/ApplicationInsights-dotnet | MIT |
| Microsoft.ApplicationInsights.AspNetCore | 2.21.0 | https://github.com/Microsoft/ApplicationInsights-dotnet | MIT |
| Microsoft.Extensions.Configuration | 6.0.0 | https://github.com/dotnet/runtime | MIT |
| Swashbuckle.AspNetCore | 6.5.0 | https://github.com/domaindrivendev/Swashbuckle.AspNetCore.git | MIT |
| AutoMapper | 12.0.1 | https://github.com/AutoMapper/AutoMapper | MIT |
| Microsoft.Extensions.DependencyInjection.Abstractions | 7.0.0 | https://github.com/dotnet/runtime | MIT |
# Security & Compliance
Microsoft Teams apps using the Bot Framework are subject to Microsoft's app certification and security requirements. GPT Pro:
- Is registered and certified in the Microsoft Teams App Store
- Complies with Microsoft 365 app security and data handling policies
- Uses Azure-hosted infrastructure in compliance with GDPR
- Never persists user conversation data for external AI training
- Enforces tenant isolation at the data layer