Securing Windows 11 and Server 2025: What CISOs should know about the latest updates

Recall allows users to take snapshots of actions they take on their machines. To use Recall, users’ machine require a turbocharged neural processing unit (NPU) capable of performing more than 40 trillion operations per second (TOPS). Windows 11 machines shipping with the feature are branded as Copilot+ computers and have Windows 11 Home software shipped on the machines. However, Recall is also supported on systems running Windows 11 Professional and Enterprise. And while the feature can be enabled on qualifying machines, it will not be enabled by default on domain machines.

Recall’s main draw is that its snapshots, which are processed locally using AI and optical character recognition (OCR), create a searchable archive of the user’s activity, including actions taken in apps and documents, as well as on websites.

Susan Bradley / CSO

Security teams should consider setting policies to block Recall’s installation in cases where its use doesn’t meet your privacy and security policies. In addition, you should consider the impact that consultants and independent or temporary employees may have when accessing your resources.