Session Abstract

Generative AI makes it easy to build agents that sound helpful. Building agents that are trusted in production is much harder. This session explores how to design Copilot Studio agents that behave like enterprise products instead of experimental chatbots. Rather than focusing on prompts or model tuning, it digs into the often ignored foundations of trustworthy AI: controlled knowledge scope, lifecycle awareness, metadata reliability and explicit governance boundaries. Using real-world patterns built with Copilot Studio, SharePoint and Power Automate, the session shows how users — not the AI — control what content an agent is allowed to use. You will see how metadata-driven source selection, curated knowledge libraries and flow-enforced rules prevent accidental oversharing and stale answers. Special attention goes to content retention and orphaned files: what happens when source documents expire, are deleted under a retention policy or lose their responsible owner, and how to keep an agent from answering from information that no longer officially exists. The mindset shift is the point: optimise for defensible answers instead of impressive ones. You will leave with design principles you can apply immediately to build production-ready agents that security teams, compliance officers and business users can all trust.

Note to event organizers

This is the same session I am presenting at Nordic Summit 2026 in Billund and previously at PowerUp, refreshed for the platform as it stands in January 2027. Background and blog: https://www.karlex.fi/knowledge-source-governed-copilot-studio-agent/ and https://www.karlex.fi/introduction-karl-johan-spiik/

Karl-Johan Spiik

Karl-Johan is a Senior Consultant with over 19 years of experience delivering solutions with Microsoft technologies. In the past eight years, he has specialized in the Power Platform, focusing on Copilot Studio, Power Automate, and Power Apps. He has delivered around 100 projects across multiple industries, working as an architect and Scrum Master. His solutions often extend into Microsoft 365, Dynamics 365, and Azure services. Recently, his work has focused on building autonomous agent solutions with Copilot Studio manually or with Claude Code. With nearly two decades of technical experience combined with a strong Agile background, Karl-Johan is a versatile technology consultant and developer. He brings both practical delivery experience and a solid theoretical foundation. In the past years, he has authored five books focused on community-driven and self-organizing ways of working.

Back to speaker profile