Home  /  Microsoft 365 Disaster Recovery

Solutions

Microsoft 365 Disaster Recovery

Microsoft 365 does not back up your data. This is the single most important thing any business using Microsoft 365 needs to understand.

Microsoft 365 Disaster Recovery

This is the single most important thing any business using Microsoft 365 needs to understand.

Microsoft keeps your data available. It maintains the platform. It protects its own infrastructure. But if your data is accidentally deleted, maliciously wiped, or encrypted by ransomware, Microsoft is not responsible for recovering it. Their terms and conditions say so explicitly, and they specifically recommend using a third-party backup tool.

Most businesses assume Microsoft is handling this. Most businesses are wrong.

What Microsoft actually provides

Microsoft 365 includes some native data protection features, but they have significant limitations:

  • Email deleted from Outlook goes into the Deleted Items folder. After 30 days it moves to Recoverable Items. After a further 14 days it is permanently deleted and Microsoft cannot recover it.
  • Files deleted from SharePoint go into the recycle bin. After 93 days they are permanently gone.
  • Microsoft Teams data, including chat history, channel messages, meeting recordings, and files, is spread across Exchange, SharePoint, and OneDrive. Each has its own retention limit. Once those limits pass, the data is unrecoverable through Microsoft’s native tools.
  • There are no automated daily backups. There is no “restore to yesterday” option. There is no recovery for data deleted beyond the retention window.

What this means in practice

  • A finance director accidentally deletes a shared SharePoint folder. It is discovered three months later. The data is gone.
  • A member of staff leaves and their Microsoft 365 licence is removed. The emails and OneDrive files go with it.
  • Ransomware encrypts your SharePoint. Microsoft’s versioning has limits on how far back you can go.
  • A disgruntled employee deletes project files on their last day. The recycle bin retention has passed.

None of these are recoverable through Microsoft alone. All of them are recoverable if a proper third-party backup is in place.

What we put in place

We deploy and manage a dedicated third-party backup solution for Microsoft 365 that captures your data independently of Microsoft’s own infrastructure. This covers:

Email (Exchange Online and Outlook)

Every mailbox backed up daily, with granular restore options for individual emails, folders, contacts, and calendar items. Retention configurable to one year, three years, or longer depending on your requirements.

SharePoint Online

Full backup of all SharePoint sites, document libraries, lists, and permissions. Point-in-time restore available, so you can recover a site, a library, or a single file to exactly the state it was in before a deletion or corruption occurred.

OneDrive for Business

Individual and shared drives backed up with the same granular restore capability as SharePoint.

Microsoft Teams

Chat history, channel messages, meeting recordings, files shared in Teams, and team membership backed up separately from the SharePoint and Exchange data that underlies them.

Why Teams data specifically needs backing up

Microsoft Teams is where a significant amount of day-to-day business communication and collaboration now lives — channel conversations, meeting recordings, shared files, and chat history. Unlike email, which most businesses already have a backup habit around, Teams data is often assumed to be “safe in the cloud” without anyone having thought through what actually happens if something goes wrong.

The most common reasons businesses need to recover Teams data are:

Accidental deletion. A team, channel, or chat deleted by a user is not always recoverable through Microsoft’s native tools within the retention window, and outside that window it’s gone entirely without a third-party backup in place.

Retention policy gaps. Microsoft’s default retention settings don’t keep everything forever, and many businesses haven’t reviewed or configured their retention policies at all, leaving data exposed to automatic deletion without anyone realising.

Departing employees. When a staff member leaves and their account is removed, Teams data associated with that account — private chats, files they owned, channels they managed — can be lost if the offboarding process doesn’t include a data preservation step.

Ransomware and malicious apps. Teams data is not immune to ransomware or to rogue third-party app integrations that corrupt or exfiltrate data within your Microsoft 365 environment.

Legal and compliance requirements. If your business ever needs to produce Teams communication records for a legal, regulatory, or audit purpose, being able to retrieve specific messages, files, or meeting recordings from a defined point in time requires a backup — not just Microsoft’s native compliance tools.

Hybrid migrations. Businesses moving between tenants, merging with another organisation, or running a hybrid environment need a reliable way to move and restore Teams data that native Microsoft tooling doesn’t always fully cover.

Why Teams data is more complex to back up than email or files

Unlike Exchange email or SharePoint files, Teams data is spread across multiple underlying Microsoft services rather than stored in one place, which is part of why a genuine, complete Teams backup is more technically demanding than it might first appear.

Microsoft does provide “compliance records” — simplified copies of channel messages and personal chats, stored within Exchange Online mailboxes for legal discovery purposes. It’s worth being clear about what these actually are and aren’t: they are not a true backup of your Teams data. They capture some content (text, emojis, GIFs, links to shared files) but specifically exclude message reactions, voice recordings, whiteboards, and meeting recordings. Critically, there is no way to restore a compliance record back into Teams itself — it exists only as a static, searchable copy for legal and compliance purposes, not as something you can recover from.

This is an important distinction if you’re ever evaluating a Teams backup solution yourself: a vendor that simply copies compliance records to a “safe location” is not providing genuine Teams backup, regardless of how it’s marketed. A proper solution captures and can restore actual Teams data — channel messages, chats, files, and the metadata that ties them together — not just a compliance copy.

Why this matters for your business

Given this complexity, it’s worth working with a provider who understands these distinctions properly rather than assuming any backup product labelled “Microsoft 365 backup” automatically and fully covers Teams. We assess this specifically as part of setting up your Microsoft 365 backup, ensuring Teams chat history, channel messages, and files are genuinely protected and recoverable, not just nominally included.

Recovery options

When something needs to be recovered, we can restore at any level: a single email, a folder, an entire mailbox, a SharePoint file, a document library, or an entire site. Recovery is available to the original location or to an alternative location, and we handle the process on your behalf so you do not need to navigate Microsoft’s admin tools under pressure.

How quickly can data be recovered?

For most recovery scenarios, individual items and folders can be restored within a few hours. Larger restores, such as a complete mailbox or an entire SharePoint site, typically complete within one working day. We will give you a specific timescale when we understand the scope of what needs to be recovered.

Who is this for?

Any business running Microsoft 365 needs proper backup in place. It is particularly critical if your business stores important documents in SharePoint or OneDrive, relies on email as a record of communications, uses Microsoft Teams as its primary collaboration tool, handles personal data subject to GDPR and data retention obligations, or has ever had a member of staff leave and wondered whether their data was properly preserved.

Is Microsoft 365 backup included in a managed support contract?

For Network Fish managed support clients, Microsoft 365 backup is available as part of the managed support service. We deploy, configure, and monitor the backup solution, verify that backups are completing successfully, and handle any recovery requests on your behalf. Speak to us about including it in your contract.

One monthly fee. One number to call.

The day-to-day risk of your Microsoft 365 data being lost, deleted, or unrecoverable becomes our job, not yours.

Book your free site survey   or call +44 (0) 207 403 4031

FAQ

Common questions

Does Microsoft 365 back up my data?

No. Microsoft 365 keeps your data available and maintains the platform, but it does not back up your data in the way most businesses assume. Microsoft’s terms and conditions state explicitly that data protection is the customer’s responsibility and that Microsoft recommends using a third-party backup tool.

Native retention periods for deleted email and SharePoint files range from 14 to 93 days depending on the application. Once those windows close, data deleted from Microsoft 365 is permanently unrecoverable without a third-party backup in place.

What happens to my Microsoft 365 data if I delete something by accident?

If you delete an email, it moves to the Deleted Items folder, then to a Recoverable Items folder, and is permanently deleted after 14 to 30 days depending on your plan and configuration. If you delete a file from SharePoint or OneDrive, it goes to the recycle bin and is permanently deleted after 93 days.

If the deletion is not discovered until after these windows have closed, Microsoft cannot recover the data. With a third-party backup in place, data can be recovered from any point within the backup retention period regardless of when Microsoft’s own retention window expired.

What Microsoft 365 data does Network Fish back up?

We back up all of the primary Microsoft 365 data types: Exchange Online mailboxes including email, contacts, and calendar items; SharePoint Online sites, document libraries, and lists; OneDrive for Business individual and shared drives; and Microsoft Teams data including chat history, channel messages, files, and meeting recordings.

All are backed up to an independent location outside Microsoft’s own infrastructure.

Can you restore a single email or file, or does it have to be everything?

Granular restore is one of the key advantages of a proper third-party backup over Microsoft’s native tools. We can restore a single email, a folder, an entire mailbox, a specific SharePoint file, a document library, or an entire SharePoint site, whichever level of recovery is needed. We handle the recovery process on your behalf.

Will Microsoft 365 backup protect me against ransomware?

Yes, significantly. Ransomware that encrypts your SharePoint or OneDrive data is one of the scenarios Microsoft’s native versioning and recycling bin cannot reliably address, because ransomware often works by overwriting or encrypting many versions simultaneously.

A third-party backup captured independently of Microsoft’s infrastructure gives you a clean recovery point from before the infection, without the limitations of Microsoft’s version history. This is one of the strongest arguments for having proper backup in place even for businesses that consider themselves otherwise well protected.

How far back can I restore Microsoft 365 data?

This depends on the retention period configured for your backup. We offer retention options of one year, three years, and longer depending on your requirements. Any point within the retention period can be used as a recovery point, so if a deletion or corruption is discovered weeks or months after it occurred, recovery is still possible as long as it falls within the backup window.

What happens to Microsoft 365 data when a member of staff leaves?

When a Microsoft 365 licence is removed from a departing employee’s account, their email, OneDrive files, and Teams data become inaccessible and will eventually be permanently deleted. Without a backup, this data may be unrecoverable if it is needed later for legal, compliance, or operational reasons.

We manage the offboarding process for managed support clients, including preserving data from departing employees’ accounts in accordance with your retention requirements before the licence is removed.

Is Microsoft 365 backup required for GDPR compliance?

GDPR requires organisations to protect personal data from accidental loss, destruction, or damage, and to be able to restore access to personal data in a timely manner following a physical or technical incident. Relying solely on Microsoft’s native retention features, which have fixed time limits and no granular restore capability, is unlikely to satisfy these requirements for most businesses.

A properly configured third-party backup with appropriate retention periods significantly strengthens your GDPR data protection position.

How is a third-party Microsoft 365 backup different from Microsoft’s own backup features?

Microsoft’s native features, including the Recoverable Items folder, SharePoint recycle bin, and version history, are designed for short-term recovery from accidental deletion within fixed time windows. They are not backups in the traditional sense.

A third-party backup captures an independent copy of your data on a daily basis, stores it outside Microsoft’s infrastructure, and provides granular point-in-time restore with configurable long-term retention. It also protects you if Microsoft itself experiences a service issue, since the backup exists independently of the Microsoft platform.

What is the difference between disaster recovery and backup for Microsoft 365?

Backup means capturing and retaining copies of your data so that individual items, files, or mailboxes can be recovered when something is deleted or corrupted. Disaster recovery goes further — it covers the process of restoring your entire operational capability following a major incident, such as a cyberattack, a prolonged Microsoft outage, or a catastrophic data loss event.

Microsoft 365 backup is the foundation of a disaster recovery plan for your cloud data. Network Fish can advise on the full disaster recovery picture for your business, covering both cloud and on-premise systems, as part of a free site survey.