Does Microsoft back up my Office 365 data?

The answer is not simple. Office 365 (now Microsoft 365) is a collection of services, and the data in each service is treated differently. While Microsoft does back up data in your SharePoint Online and OneDrive for Business sites, those backups cannot be used by the customers at will. Administrators can contact Microsoft to use those backups for restoration purposes, but there are no service-level agreements to cover this scenario so it could take a while for Microsoft to provide the data you require.

There are also no native backup features provided for Exchange Online.

However, Microsoft does provide a few features to ensure data consistency and protection. Let's take a look at the various features Microsoft provides, and discuss if those features are sufficient.

The different features provided by Microsoft are:

Geo-redundancy

 

Geo-redundancy is not limited to particular plans and is available to all users in all Office 365 plans. Microsoft continuously replicates data in your Office 365 services to at least two geographically dispersed locations to ensure no data is lost in case of infrastructure failures in any data center. If any data center were to be offline for any reason, Microsoft initiates service continuity management procedures, and users would probably not notice any interruptions to their Office 365 services.

Unless there is a disaster of such a magnitude that multiple data centers are destroyed, your Office 365 data is safe.

While this might make you think that you do not need a separate backup solution, the gaping hole in trusting geo-redundancy for all your backup needs is that it does not protect against accidental or willful data deletion. All changes made to Office 365 data is replicated to at least one other data center. Microsoft considers all changes made to Office 365 data by users intentional, and even large-scale deletions or modifications are replicated to the other data centers, resulting in no data center retaining deleted data. You might lose valuable data if you don't have a backup on hand.

Recycle Bin

Microsoft's Recycle Bin in Exchange Online, SharePoint Online, and OneDrive for Business enables users and administrators to recover from accidental deletions. The amount of time for which deleted objects are stored in the Recycle Bin varies among the different Office 365 services.

Exchange Online

 

When a mailbox item is deleted, the item is placed in the Recycle Bin of the user, also called the deleted items folder or the first-stage Recycle Bin. When the Recycle Bin is emptied by the user, items in the Recycle Bin are moved to the recoverable items folder. The recoverable items folder is invisible to the users and can only be accessed by administrators. By default, deleted mailbox items are stored in the recoverable items folder for 14 days, but this period can be extended to a maximum of 30 days (calendar entries can be stored for a maximum of 120 days).

The items in the recoverable items folder will be permanently deleted from the Office 365 servers at the end of the retention period as specified by the retention policy, or if an administrator manually empties the items in the Recoverable Items folder.

Limitations:

While the Recycle Bin can help you avoid accidental deletions to an extent, there is one glaring limitation to it.

  • All mailbox items that are deleted from the Recycle Bin can only be recovered within a maximum time frame of 30 days (120 days for calendar entries).

SharePoint Online and OneDrive for Business

 

In SharePoint Online and OneDrive for Business, when you delete an item, the item is moved to the Recycle Bin and held for 93 days. If users empty the Recycle Bin before 93 days, the items are moved to the second-stage Recycle Bin (also called the site collection Recycle Bin) and held for the remainder of the 93 days. Whether the items are in the user's Recycle Bin or the site collection Recycle Bin, they will be deleted from the Office 365 servers after 93 days from the date of deletion and cannot be recovered by the user or the administrator.

While the Recycle Bin can help you protect against accidental deletions to an extent, there are some limitations to it.

Limitations:

  • SharePoint Online and OneDrive for Business items can only be recovered before 93 days from the date of deletion.
  • Items that are stored in the SharePoint Online and OneDrive for Business Recycle Bin count against the storage quota. When the volume of data exceeds your quota, the oldest items in the Recycle Bin are purged to make space for the new items.

However, Microsoft backs up all the contents in your SharePoint Online and OneDrive for Business sites once every 12 hours. Microsoft retains a copy of all the site contents for an additional 14 days beyond the 93 days. Administrators can contact Microsoft Support to request a restore any time within the 14-day window, but there are no service-level agreement to cover this scenario, so it might take a long time for Microsoft to provide the data you require.

Litigation holds

 

Retention policies or litigation holds are applicable to all Office 365 services such as Exchange Online, SharePoint Online, and OneDrive for Business. Litigation holds can be applied to entire mailboxes and sites to prevent data deletion of any kind. Data in mailboxes or sites cannot be deleted by users as long as the hold is in effect.

However, rogue administrators or users with privileged access can still delete items from a mailbox or site kept in hold by removing the hold, deleting the items, and then reapplying the hold. To combat situations like this, Microsoft provides a feature called Retention Lock or Preservation Lock that ensures administrators cannot turn off the retention policy or make it less restrictive, and can only increase the severity or duration of the litigation holds.

While litigation holds and preservation lock can work well in tandem to ensure no data will be deleted, it adds a few other problems to the mix.

Limitations

  • Litigation holds are effective when coupled with a preservation lock, but enabling the lock is an irreversible action. The space used by your mailbox items and documents can quickly build up and exceed your allocated quota, as you cannot delete any item, requiring you to purchase additional storage space.
  • If your Exchange Online mailboxes or OneDrive for Business sites are infected with ransomware, litigation holds will prevent you from deleting the infected files.

Files Restore

 

OneDrive for Business’ Files Restore feature gives you the ability to roll back all files and folders in OneDrive for Business sites to a previous version. This allows you to recover from large-scale disasters like ransomware and malware attacks on your OneDrive for Business sites.

Even though this feature can help you recover from most disasters to OneDrive for Business data, there are a handful of limitations.

Limitations

  • Files Restore uses version history and the Recycle Bin to restore OneDrive, so it's subject to the same restrictions as those features. When version history is turned off, Files Restore won’t be able to restore files to a previous version.
  • Deleted files can’t be restored after they’ve been removed from the site collection Recycle Bin by manual deletion or emptying the Recycle Bin.
  • Albums are not restored.
  • If you upload a file or folder again after deleting it, Files Restore will skip the restore operation for that file or folder.

While Microsoft offers a lot of features to ensure data continuity and protection, it’s clear that you still need to deploy a robust Office 365 backup solution to ensure your Office 365 data is always safe.

The RecoveryManager Plus way

 

An Office 365 backup tool like RecoveryManager Plus can help you overcome all the limitations of the native methods while also adding more features to ensure even greater security.

Limitations

  • Back up all items in your Exchange Online mailboxes, SharePoint Online, and OneDrive for Business sites.
  • Restore deleted mailbox and site items to your Office 365 mailboxes and sites no matter when the deletion happened.
  • Recover entire OneDrive for Business sites from any ransomware or malware attack, even if version history is not enabled.
  • Store backups of your Office 365 environment within your premises or in Azure Blob Storage and file shares as needed.
  • Encrypt your backups with 256-bit encryption standard.
  • Enable custom retention policies to automatically discard backup data when the retention period expires.

Evaluate RecoveryManager Plus and find out how easy it is to secure all your Office 365 data. Support is included in your trial if you need any assistance. Download your fully functional 30-day free trial today.

  • Please enter a business email id
  •  
  •  
    By clicking 'Get Your Free Trial', you agree to processing of personal data according to the Privacy Policy.

Thanks!

Your download is in progress and it will be completed in just a few seconds!
If you face any issues, download manually here

A single pane of glass for Active Directory, Azure Active Directory,
Microsoft 365, Google Workspace, and Exchange Backup.
  • » Personal WorkDrive backup
  • » Backup retention
  • » Incremental backup