{"id":32695,"date":"2026-10-07T18:12:43","date_gmt":"2026-10-07T16:12:43","guid":{"rendered":"https:\/\/eu.wedoback.com\/?page_id=32695"},"modified":"2026-10-07T18:38:18","modified_gmt":"2026-10-07T16:38:18","slug":"should-you-back-up-microsoft-365","status":"publish","type":"page","link":"https:\/\/eu.wedoback.com\/en\/guides\/cloud-email\/should-you-back-up-microsoft-365\/","title":{"rendered":"Should you back up Microsoft 365?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"32695\" class=\"elementor elementor-32695 elementor-31934\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-e7467ae e-con-full wdb-g e-flex e-con e-parent\" data-id=\"e7467ae\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-6a5cfe9 e-con-full wdb-g-hero e-flex e-con e-parent\" data-id=\"6a5cfe9\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-5d54554 e-con-full wdb-g-hero-in e-flex e-con e-parent\" data-id=\"5d54554\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-44fc503 elementor-widget elementor-widget-text-editor\" data-id=\"44fc503\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/cloud-email\/\">Microsoft 365 and Google Workspace<\/a><\/p><p class=\"wdb-g-pill\" style=\"--pill:#5b8def\">Microsoft 365 and Google Workspace<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-46c2db4 elementor-widget elementor-widget-heading\" data-id=\"46c2db4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Should you back up Microsoft 365?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e0700a8 elementor-widget elementor-widget-text-editor\" data-id=\"e0700a8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-lead\">Yes, if the messages or files stored in Microsoft 365 could not be rebuilt after a deletion, a compromised account or a retention period that is too short. That is the case for almost every SME whose email and team folders live in that tenant. No, only if another system already holds a complete, tested historical copy, which is rare.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19d6eec elementor-widget elementor-widget-text-editor\" data-id=\"19d6eec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"wdb-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>3 min<\/b> read<\/span><span><b>6<\/b> sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-465c1b4 e-con-full wdb-g-body e-flex e-con e-parent\" data-id=\"465c1b4\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-9cf41b7 e-con-full wdb-g-grid e-flex e-con e-parent\" data-id=\"9cf41b7\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-6b7c763 e-con-full wdb-g-article e-flex e-con e-parent\" data-id=\"6b7c763\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c7da95f elementor-widget elementor-widget-text-editor\" data-id=\"c7da95f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-key\"><h2>Key points<\/h2><ul><li>Microsoft\u2019s safety nets last days or weeks: <strong>14 to 30 days<\/strong> for a purged message, <strong>30 days<\/strong> to restore a deleted account, <strong>93 days<\/strong> for the SharePoint recycle bins.<\/li><li>A hacked admin account can purge mailboxes and sites: redundancy replicates the destruction.<\/li><li>Not backing up one component (test tenant, distribution list) is acceptable <strong>if it is documented<\/strong>.<\/li><li>Typical setting: a daily copy, kept for <strong>30 to 90 days<\/strong>, a period that must be justified under the GDPR.<\/li><\/ul><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-82d49e5 elementor-widget elementor-widget-text-editor\" data-id=\"82d49e5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>When having no backup costs you<\/h2><ul><li>An employee deletes a folder, empties the recycle bin, and the need resurfaces two months later. Exchange Online only keeps a permanently deleted message for 14 days by default, 30 at most.<\/li><li>An admin account is hacked. The attacker purges mailboxes, sets up forwarding rules and deletes sites.<\/li><li>A retention policy is set too aggressively and erases more than intended.<\/li><li>The account of a departed employee is deleted and the 30-day window during which Microsoft allows it to be restored with its mailbox is missed.<\/li><li>Ransomware encrypts synchronised files (OneDrive, SharePoint via the workstation) and file versions are no longer enough.<\/li><\/ul><p>In each of these cases, Microsoft keeps the service running. The business data, however, is gone.<\/p><table><thead><tr><th>Situation<\/th><th>Built-in Microsoft safety net<\/th><th>After this period<\/th><\/tr><\/thead><tbody><tr><td>Message purged from the mailbox<\/td><td>14 days by default, configurable up to 30<\/td><td>Lost<\/td><\/tr><tr><td>User account deleted<\/td><td>30 days<\/td><td>Account and mailbox lost<\/td><\/tr><tr><td>SharePoint file or site deleted<\/td><td>93 days of recycle bins, then 14 days via support<\/td><td>Lost<\/td><\/tr><tr><td>Purge by a compromised admin<\/td><td>None beyond the periods above<\/td><td>Lost<\/td><\/tr><\/tbody><\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10d32bd elementor-widget elementor-widget-text-editor\" data-id=\"10d32bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>When you can decide not to back up a component<\/h2><ul><li>A distribution list mailbox with no useful history.<\/li><li>Purely conversational Teams teams, if it is documented that these exchanges are not part of the company\u2019s records. The files, however, must still be covered.<\/li><li>A test tenant.<\/li><\/ul><p>Deciding not to back something up is acceptable if it is documented. \u201cWe\u2019ll see\u201d is not a decision.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4f8991a elementor-widget elementor-widget-text-editor\" data-id=\"4f8991a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What it costs<\/h2><p>The price depends on the number of mailboxes and the volume retained, plus the length of history kept. A daily backup kept for 30 to 90 days is the most common setting. Going further should be justified by a business need, not by fear: mailboxes contain personal data, and the GDPR prohibits keeping it indefinitely. The retention period is set according to the purpose, after which the data is deleted.<\/p><p>Comparing it with the cost of a week of unrecoverable email (unanswered customers, contract attachments, order threads) makes the choice simpler than looking at the unit price.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb3d73e elementor-widget elementor-widget-text-editor\" data-id=\"eb3d73e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What not to buy instead<\/h2><p>A higher Microsoft licence (E5, for example) adds security and compliance. It is not equivalent to a copy outside the tenant. The paid Microsoft 365 Backup offering, on the other hand, is a genuine backup of Exchange Online, OneDrive and SharePoint, billed by volume, and Microsoft states that its data stays within its Microsoft 365 boundary. It meets part of the need. It does not meet the wish for a copy held by another party, nor does it back up servers that are not in Microsoft 365. The comparison is in <a href=\"\/en\/guides\/cloud-email\/does-microsoft-365-include-backup\/\">Does Microsoft 365 really include a backup?<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7931f73 elementor-widget elementor-widget-text-editor\" data-id=\"7931f73\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-brand\"><h2>At WeDoBack<\/h2><p>Backing up Microsoft 365 emails, calendars and contacts is part of the service: one agent per address, plus the terabytes of the volume, under the <a href=\"\/en\/smart-offer\/\">SMART<\/a> offer (\u20ac49.99 excl. VAT\/TB\/month, support billed per intervention) or the <a href=\"\/en\/integral-offer\/\">INTEGRAL<\/a> offer (from \u20ac100 down to \u20ac65 excl. VAT\/TB\/month depending on volume, two hours of support per month). The principle is the same as for a server: the copy leaves the original environment and remains encrypted with a key held by the customer. SharePoint and OneDrive are covered too: a single quote can bring together emails, files and servers in the same storage volume.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/smart-offer\/\">Discover the SMART offer<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/quotation\/\">Request a quote<\/a><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-74fcca0 elementor-widget elementor-widget-text-editor\" data-id=\"74fcca0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-faq\"><h2>Frequently asked questions<\/h2><details><summary>How long does Microsoft keep the account of an employee who has left?<\/summary><p>Once a user is deleted, the administrator has 30 days to restore the account and its data, mailbox included. After that, the account and its mailbox can no longer be restored this way. What must remain accessible therefore has to be decided before deletion: a backup, or retention within the tenant.<\/p><\/details><details><summary>How long should email backups be kept?<\/summary><p>Thirty to ninety days covers most mistakes and compromises discovered late. Beyond that, you need a reason. Mailboxes contain personal data: the GDPR (Article 5) prohibits keeping information about individuals indefinitely: the retention period must follow the purpose, as data protection authorities point out (the CNIL in France, for example).<\/p><\/details><details><summary>Is Microsoft 365 Backup enough?<\/summary><p>It is a genuine backup of Exchange, OneDrive and SharePoint, paid for and hosted in the Microsoft cloud. It meets the need to roll back. It does not meet the wish for a copy held by another party, nor does it cover servers and workstations outside Microsoft 365.<\/p><\/details><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d7784c elementor-widget elementor-widget-text-editor\" data-id=\"9d7784c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"wdb-g-related\"><a href=\"\/en\/guides\/cloud-email\/microsoft-365-backup-what-to-know\/\"><small>Microsoft 365 and Google Workspace<\/small>Backing up Microsoft 365: what you need to know<\/a><a href=\"\/en\/guides\/cloud-email\/does-microsoft-365-include-backup\/\"><small>Microsoft 365 and Google Workspace<\/small>Does Microsoft 365 really include a backup?<\/a><a href=\"\/en\/guides\/backup\/how-long-to-keep-backups\/\"><small>IT backup<\/small>How long should you keep your backups?<\/a><a href=\"\/en\/guides\/what-to-do-if\/a-mailbox-was-emptied-or-hacked\/\"><small>What to do if\u2026<\/small>A mailbox has been emptied or hacked<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-51c59c6 elementor-widget elementor-widget-text-editor\" data-id=\"51c59c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-sources\"><h2>Sources<\/h2><p class=\"wdb-g-src-date\">Documents consulted in October 2026.<\/p><ol><li><a href=\"https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/admin\/add-users\/restore-user\" target=\"_blank\" rel=\"noopener\">Restore a user<\/a> \u2014 Microsoft Learn<\/li><li><a href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/recipients-in-exchange-online\/manage-user-mailboxes\/change-deleted-item-retention\" target=\"_blank\" rel=\"noopener\">Change how long permanently deleted items are kept for an Exchange Online mailbox<\/a> \u2014 Microsoft Learn<\/li><li><a href=\"https:\/\/learn.microsoft.com\/en-us\/compliance\/assurance\/assurance-sharepoint-online-data-deletion\" target=\"_blank\" rel=\"noopener\">SharePoint data deletion in Microsoft 365<\/a> \u2014 Microsoft Learn<\/li><li><a href=\"https:\/\/learn.microsoft.com\/en-us\/microsoft-365\/backup\/backup-overview\" target=\"_blank\" rel=\"noopener\">Overview of Microsoft 365 Backup<\/a> \u2014 Microsoft Learn<\/li><li><a href=\"https:\/\/www.cnil.fr\/fr\/cnil-direct\/question\/dois-je-fixer-une-duree-de-conservation-des-donnees-dans-mon-fichier\" target=\"_blank\" rel=\"noopener\">Do I need to set a data retention period for my file? (in French)<\/a> \u2014 CNIL (French authority)<\/li><li><a href=\"https:\/\/www.wedoback.com\/offres-et-tarifs\/\" target=\"_blank\" rel=\"noopener\">Offers and prices<\/a> \u2014 WeDoBack<\/li><\/ol><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dfc2b66 e-con-full wdb-g-aside e-flex e-con e-parent\" data-id=\"dfc2b66\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-aae15d4 elementor-widget elementor-widget-text-editor\" data-id=\"aae15d4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<nav class=\"wdb-g-toc\" aria-label=\"Table of contents\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-15e2ec4 elementor-widget elementor-widget-text-editor\" data-id=\"15e2ec4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"wdb-g-card\"><h3>Planning a backup, DRP or BCP project?<\/h3><p>More than 20 years of experience protecting business data.<\/p><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-tel\" href=\"tel:+33972507828\">+33 9 72 50 78 28<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-c80bbab e-con-full wdb-g-cta e-flex e-con e-parent\" data-id=\"c80bbab\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-c0a6766 e-con-full wdb-g-cta-in e-flex e-con e-parent\" data-id=\"c0a6766\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3c32378 elementor-widget elementor-widget-text-editor\" data-id=\"3c32378\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Protect your data with WeDoBack<\/h2><p>Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.<\/p><div class=\"wdb-g-btns\"><a class=\"wdb-g-btn wdb-g-btn-primary\" href=\"\/en\/quotation\/\">Request a quote<\/a><a class=\"wdb-g-btn wdb-g-btn-ghost\" href=\"\/en\/offers-and-prices\/\">See offers and prices<\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":32688,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"Should you back up Microsoft 365? | WeDoBack","_seopress_titles_desc":"Yes, as soon as losing a mailbox or a team site for more than a few days would be serious. Microsoft\u2019s redundancy does not cover that case.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-messageries.jpg","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"https:\/\/www.wedoback.com\/wp-content\/uploads\/sites\/6\/2026\/10\/wdb-og-messageries.jpg","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":"","_members_access_role":[],"_members_access_error":""},"class_list":["post-32695","page","type-page","status-publish","hentry"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"_links":{"self":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32695","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/comments?post=32695"}],"version-history":[{"count":1,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32695\/revisions"}],"predecessor-version":[{"id":32888,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32695\/revisions\/32888"}],"up":[{"embeddable":true,"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/pages\/32688"}],"wp:attachment":[{"href":"https:\/\/eu.wedoback.com\/en\/wp-json\/wp\/v2\/media?parent=32695"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}