ManagedITServices.Tech

Backup and disaster recovery

Does Microsoft Back Up Microsoft 365?

Microsoft keeps Microsoft 365 available, but recovering your data after a deletion, a ransomware attack or a departed employee is a different job. Here is where the line sits.

The short answer

Microsoft protects the Microsoft 365 service with redundancy across its data centers, but that guards against Microsoft’s failures, not yours. Recycle bins, version history and retention policies help for a limited time and were not designed as a point-in-time backup. Under the shared responsibility model your data and accounts are your responsibility, so a separate backup of Exchange, OneDrive, SharePoint and Teams is what covers accidental deletion, ransomware, malicious insiders and departed users.

Key takeaways

  • Redundancy keeps the service up; it is not a backup of your data
  • Recycle bins and retention have limits and were not built for restores
  • Back up Exchange, OneDrive, SharePoint and Teams
  • Test restoring a mailbox and a site, not just the backup job

The shared responsibility model

In every cloud service the provider and the customer split the work. Microsoft runs the infrastructure, keeps the service available and replicates data so a failed disk or data center does not lose it. The customer is responsible for their accounts, their data and who is allowed to change or delete it.

Replication copies every change, good or bad. When a user deletes a folder, or ransomware encrypts synced files, those changes replicate too.

What built-in features cover

Built-in features help with

  • Recently deleted emails and files, for a limited time
  • Earlier versions of a OneDrive or SharePoint file
  • Retention policies and holds for compliance

They fall short on

  • Point-in-time restore of a whole mailbox or site
  • Data deleted longer ago than the retention window
  • Accounts removed after an employee leaves
  • Restores at scale after ransomware or a rogue admin

What to back up

  • Exchange Online mailboxes, including shared mailboxes, calendars and contacts
  • OneDrive for every user, including people who have left
  • SharePoint sites and document libraries
  • Teams channel files and conversations
  • Configuration and settings, where your backup tool supports it

Choosing a Microsoft 365 backup

  • Copies kept outside your tenant, or protected so a compromised admin cannot delete them
  • Granular restore of a single email, file or folder as well as whole mailboxes and sites
  • Retention set to your business and compliance needs
  • Automatic protection for new users and new sites
  • Reports on failed, incomplete and successful backups

Microsoft now sells its own Microsoft 365 Backup service alongside third-party options, each with different restore speeds, retention and storage locations. The right fit depends on how much data you hold and how quickly you would need it back.

How we help

Microsoft 365 administration comes with every supported user, including offboarding, so data is handed over before an account is removed. When you ask for a quote, tell us about your Microsoft 365 data and we will include it in your backup and disaster recovery plan, alongside the local and offsite backup strategy, monitoring and restore testing.

How managed backup works

Sources

Information on this page is general and is not legal or compliance advice.

Frequently Asked Questions

Does Microsoft 365 include backup?

Microsoft 365 includes redundancy, recycle bins, version history and retention features that help with recent mistakes. A separate point-in-time backup is not included by default; Microsoft 365 Backup is a separate paid service, and third-party backups are also available.

How long does Microsoft keep deleted emails?

By default Exchange Online keeps deleted items recoverable for 14 days, which an admin can extend to 30, unless a retention policy or hold keeps them longer.

Is a retention policy the same as a backup?

No. Retention keeps content for compliance and eDiscovery. It is not designed for quick, point-in-time restores of whole mailboxes or sites.

Do I need to back up Teams?

Yes. Teams files live in SharePoint and OneDrive and its conversations are stored in Exchange, so a backup should cover all three.

Next step

See what managed IT would cost

Tell us your users, workstations and locations.

Get a quote

Monday to Friday, 7:30 AM to 5:30 PM