Microsoft Copilot Ads for Healthcare: Rules and Tracking

Healthcare ads can already show in Microsoft Copilot: Microsoft says “If an ad can serve on Microsoft Bing, it can also serve in Copilot,” and eligible campaigns are opted in automatically, with no way to opt out (Microsoft). Microsoft doesn't currently report Copilot results on their own, and it tells advertisers not to place its UET tag on pages subject to HIPAA (Microsoft). Curve Compliance sends your conversions, including booked appointments, to Microsoft Advertising from its own servers instead, and strips PHI before data reaches an ad platform.

Book a call. Running Microsoft Ads for a clinic or telehealth brand? Curve Compliance replaces browser ad pixels, including the UET tag, with one script and sends conversions server-side to Microsoft Advertising, Google Ads, Meta, TikTok, LinkedIn and ChatGPT Ads. Curve's team does the setup, typically live in about a week. Book a call with Curve.

What Microsoft says about ads in Copilot

Microsoft describes Copilot as “an AI-powered web assistant providing a conversational chat experience,” and says “Microsoft Advertising serves ads in varying formats which are displayed in Copilot's responses.” You don't build these ads separately: “Ads in Copilot are automatically created using your campaign's existing assets, including text and images.” Every answer in this table comes from Microsoft's help page, read on October 26, 2026 (About ads in Copilot).

Question	What Microsoft says	Source
Are my campaigns in Copilot?	“All eligible campaign and ad types are automatically opted in to serving in Copilot.”	Microsoft Learn
Can I opt out?	“Advertisers cannot opt out of serving ads”	Microsoft Learn
Can I see Copilot results on their own?	“Microsoft Advertising does not currently support specific metrics for ads served in Copilot.”	Microsoft Learn
Do negative keywords apply?	Negative keyword matching “applies to Copilot and works the same as it does for web searches”	Microsoft Learn
Can restricted categories serve?	“If an ad can serve on Microsoft Bing, it can also serve in Copilot.”	Microsoft Learn
Prescription ads?	“In pharmaceutical advertising, prescription ads will not be shown unless specific disclaimers are used.”	Microsoft Learn
Do search ads need anything extra?	“Search ads must include a logo to be eligible to show in Copilot.”	Microsoft Learn
How is an ad chosen?	“We consider the context of the entire conversation, not only the last prompt”	Microsoft Learn

Microsoft lists these as eligible: Multimedia ads; Product ads, including Shopping campaigns and Performance Max campaigns serving Product ads; Search ads with logo extensions or business logo automated extensions, including Dynamic Search ads, Responsive Search ads and ads in Performance Max campaigns serving in search placements; and two Vertical ad types, Property promotion ads and Tours and Activities ads (Microsoft). For most clinics, that means search and Performance Max campaigns. The page shows a last update of June 19, 2026.

Can healthcare ads show in Copilot?

Yes, on the same terms as Bing. Microsoft's answer to whether restricted categories such as pharmaceutical advertising can serve in Copilot is the Bing rule quoted above. It adds: “We recommend advertisers use disclaimers in ads for all restricted or sensitive categories” (Microsoft). So the healthcare policy you already follow on Bing is the policy that decides whether you show in Copilot. For the Bing setup itself, see a compliant Microsoft Ads setup for healthcare.

That policy was last updated on October 5, 2026 (Microsoft Healthcare and Pharmaceutical policy). Three parts matter most to clinics and telehealth brands:

• Preapproval for prescriptions. “Online pharmacies, telemedicine providers that sell prescription drugs, and prescription drug manufacturers must be preapproved in order to serve ads on the Microsoft Advertising network” (Microsoft). See what to do when a pharmacy or telemedicine ad is disapproved.
• LegitScript for addiction treatment. Advertisers of drug or alcohol addiction services “must be certified by Legitscript,” and Microsoft says “Lead generation ads are not allowed” in that category (Microsoft). See LegitScript certification for healthcare ads.
• No targeting on health data. Advertisers must commit to “Not targeting consumers based on sensitive health information,” and “Advertising must target users ages 18+” (Microsoft).

How Copilot picks an ad next to a health question

Copilot reads the whole chat. Microsoft says: “After Copilot has resolved the initial query, we leverage user information to surface ads that are relevant to them while reaching the audiences that the advertisers are targeting” (Microsoft). So the match can reflect earlier turns of the chat, not just the last message. For showing up in Copilot's unpaid answers, see the Bing Copilot visibility playbook.

Microsoft's brand safety answer covers content its models flag as potentially harmful: “In such cases, ads are not shown in any flagged conversations.” It also says “Copilot will also honor any negative keywords you have in place for your campaigns” (Microsoft). Negative keywords are the control Microsoft's page names. Review the search terms your campaigns match today and add negatives for any topic you don't want your clinic's name next to. Other AI assistants handle health conversations differently; see healthcare ads in AI assistants: 2026 platform rules.

Why you can't see Copilot results on their own

Microsoft doesn't currently split out metrics for ads served in Copilot (Microsoft), so there is no Copilot line in your reports to check. Microsoft also says “Performance Max campaigns are the best way to increase exposure on Copilot,” and points Search advertisers to broad match, autogenerated assets and Dynamic Search ads. Those automated campaigns steer toward the conversions you report. If the only conversion you send is a page view or a form start, that is what Copilot placements get tuned toward too.

The fix is the same for every placement: report the outcome you care about, such as a booked appointment, and credit it to the ad click that started it. When a patient leaves your site to book in a scheduler, the booking can still be matched to that click. See booked appointment attribution.

UET on a health site: Microsoft's own limits

UET is Microsoft's conversion tag. Microsoft's own help page on UET safeguards sets these limits (Microsoft, UET technical safeguards):

• Keep UET off HIPAA pages. “Do not place UET tags on pages subject to HIPAA regulations” (Microsoft).
• No BAA for UET. “Microsoft does not offer Business Associate Agreements (BAAs) for UET and does not represent that UET meets HIPAA requirements” (Microsoft).
• No PHI in custom parameters. “Do not include any personally identifiable information (PII) or protected health information (PHI) in custom parameters.”
• Health sites lose personalization. “A machine-learning classifier identifies healthcare and pharmaceutical domains. Events from these domains are excluded from personalization.”
• The vertical setting turns off remarketing. “If an advertiser selects the Healthcare/Pharma vertical during setup, remarketing and audience features are automatically turned off.” See remarketing and audiences turned off.

Microsoft adds that “Advertisers subject to HIPAA must not use UET in ways that could expose Microsoft to PHI” (Microsoft). The BAA Directory entry for Microsoft Advertising records the same answer: no BAA. For the tag's settings one by one, see Microsoft UET and health data: what to configure, and for the wider picture, which ad platforms sign a BAA.

Tracking Copilot conversions server-side

• Take the browser tag off pages subject to HIPAA. That follows Microsoft's own instruction above. Curve's free website scan lists the pixels and trackers a page loads today.
• Send conversions from a server. A server-side send lets you decide exactly which fields Microsoft receives, event by event, before anything leaves.
• Use neutral event names. Name the conversion for the step, such as a booked appointment, not for the condition or treatment.
• Count outcomes, not clicks. Bookings and qualified calls tell automated bidding which clicks became patients. Page views don't.
• Keep a record. Log what was sent and what Microsoft accepted, so you can answer for every conversion later.

Which rules apply to your pages depends on your setup, so talk to your counsel.

Copilot Checkout and Brand Agents

On January 8, 2026, Microsoft announced two more AI formats (Microsoft Advertising blog). It says “Copilot Checkout is beginning to roll out in the U.S. on Copilot.com, with partner activation across PayPal, Shopify, and Stripe,” and that Brand Agents “bring AI-powered guidance for customers to your own site.” Microsoft presents both as tools “to help merchants thrive,” and its examples are retailers. Before you add any AI chat to a clinic website, ask the vendor whether it signs a BAA, because patients may type health details into a chat box. Google's side of the same shift is covered in healthcare ads in Google AI Mode and AI Overviews.

How Curve Compliance helps

Curve Compliance replaces browser ad pixels, including the UET tag, with one script and sends conversions server-side from Curve's servers to Microsoft Advertising, as well as Google Ads, Meta, TikTok, LinkedIn and ChatGPT Ads. Microsoft receives only a fixed list of fields, events can use neutral names, and contact identifiers are off by default on Meta, Google Ads and TikTok. Curve checks every event for PHI-like patterns, such as condition names, form answers and emails in URLs, and strips PHI before data reaches an ad platform. Event Logs show what Curve sent to each platform and what the platform accepted.

Curve keeps ad attribution when a patient leaves to book in IntakeQ, Calendly, Acuity, Jane App and other schedulers, and bookings made days later still match. It takes outcomes from booking systems, CRMs and call tracking through incoming webhooks and credits each to the original ad click, so the conversions Microsoft receives reflect booked patients, not page views. See the Microsoft Advertising integration. Curve is SOC 2 Type II and signs a BAA on every plan (Directory entry). Curve's team does the setup, typically live in about a week.

Sources, checked October 26, 2026: Microsoft Learn, About ads in Copilot; Microsoft Advertising Help, UET technical safeguards for sensitive data; Microsoft Advertising policies, Healthcare and Pharmaceutical; Microsoft Advertising blog, Conversations that Convert: Copilot Checkout and Brand Agents.

Frequently Asked Questions

Can healthcare ads show in Microsoft Copilot?

Yes. Microsoft says “If an ad can serve on Microsoft Bing, it can also serve in Copilot,” so healthcare ads that meet Microsoft's healthcare policy can show there (Microsoft).

Are my Microsoft Ads already showing in Copilot?

They may be. Microsoft says “All eligible campaign and ad types are automatically opted in to serving in Copilot,” and eligible search ads need a logo (Microsoft). Microsoft doesn't promise that any given ad will appear there.

Can I opt out of ads in Copilot?

No. Microsoft says “Advertisers cannot opt out of serving ads” in Copilot (Microsoft). Negative keywords still apply there, the same way they do on Bing.

Can I see Copilot conversions separately?

Not today. Microsoft says it “does not currently support specific metrics for ads served in Copilot” (Microsoft), so you can't report Copilot results on their own.

Can I use the UET tag on a clinic website?

Microsoft says “Do not place UET tags on pages subject to HIPAA regulations” (Microsoft). Clinics that want Microsoft conversion data can send conversions server-side instead, with PHI removed first.

Does Microsoft sign a BAA for UET?

No. Microsoft says it “does not offer Business Associate Agreements (BAAs) for UET” (Microsoft; Directory entry).

Do prescription or telehealth ads show in Copilot?

They can if they can serve on Bing. Microsoft requires preapproval for online pharmacies and telemedicine providers that sell prescription drugs (Microsoft), and says prescription ads in Copilot need specific disclaimers (Microsoft).

Does Curve Compliance send conversions to Microsoft Advertising?

Yes. Curve sends conversions server-side to Microsoft Advertising with a fixed list of fields and PHI stripped first, under a BAA Curve signs on every plan (Directory entry).

Talk to Curve Compliance

Book a call. Want your Microsoft Ads, in Copilot and on Bing, to learn from booked patients without a UET tag on your pages? Curve Compliance sends conversions server-side, strips PHI before data reaches an ad platform and signs a BAA on every plan. Book a call with Curve.