According to a report published on September 28 by US technology news site 404 Media, based on internal company documents, outside contractors working to improve Microsoft’s AI assistant Copilot can see the photos users upload for editing and the prompts they write. The documents include instruction guides, real Copilot prompts and images, and posts from an internal message board for contractors.
According to the report, in each task a reviewer is shown the user’s original prompt, the uploaded photo and two edits generated by Copilot, and chooses which is better. One person who works on the prompts told 404 Media: “Faces are always uncensored, and many of the prompts are sexual in nature and dubiously consensual.” The reviewers are not tasked with flagging harmful content, only with rating the technical quality of the edits.
Contractors described frequently encountering sexually explicit and potentially illegal material, including covertly taken upskirt photos and requests for sexualised edits of real women. At least one company hiring the contractors is Prolific. According to Windows Central, Microsoft’s guidance to contractors advises them to trust their intuition in unclear cases.
Microsoft says the updated consumer Copilot app, available since August 18, does not use prompts, responses or uploaded file contents to train foundation models. The reporting does not show that every Copilot prompt or uploaded image is reviewed by a person; it shows that some contractors saw user-submitted material during quality evaluations. Earlier this month, 404 Media reported that OpenAI contractors also read real ChatGPT conversations.
The documents, task structure, a contractor's quote, reviewers not flagging harmful content and Prolific: 404 Media (via The Next Web), 28-29 September 2026. Sexually explicit requests: 404 Media, 28 September 2026; Windows Report, 29 September 2026. Guidance to trust intuition: Windows Central, 29 September 2026. Microsoft's statement on training and the August 18 date: Malwarebytes, 29 September 2026. Not every item reviewed: Windows Report and Gadget Review, 29 September 2026. Earlier OpenAI contractor report: The Next Web.
How many contractors had access to user content and what share of image-editing tasks received human review have not been disclosed. Microsoft's direct response to the report does not appear in the sources reviewed.
Whether content from users in Turkey is included in these processes, and how long content is retained, is unknown.

Leave a comment