The assumption that costs businesses their data
Ask a business owner whether their Microsoft 365 email and files are backed up and most will say yes without hesitation. It lives in the cloud, after all. This is one of the most common — and most expensive — misunderstandings in business technology.
Microsoft keeps the service running and highly available. What Microsoft does not do is guarantee to bring your data back after you delete it, an employee leaves, or ransomware sweeps through your files. That responsibility is explicitly yours.
Microsoft says so in its own agreement
This is not an interpretation. Microsoft's Services Agreement recommends that customers use a third-party app or service to back up their content, and Microsoft operates on a shared-responsibility model: they secure the platform; you are responsible for your data. The built-in retention is short and designed for accidental deletion, not full recovery.
What actually goes wrong
The gap shows up in predictable, painful ways:
- A departed employee's mailbox is deleted with their license, then needed months later — past retention.
- Ransomware encrypts files that sync through OneDrive to everyone before anyone notices.
- A folder is deleted and only missed weeks later, once the recycle bin has emptied.
- A compromised account quietly deletes mail to cover an attacker's tracks.
How to close the gap
The fix is an independent backup of Exchange, OneDrive, SharePoint and Teams that keeps meaningful history and — crucially — is tested. At roughly $4 per person per month it is the cheapest insurance most businesses will ever buy, and it turns a permanent loss into a five-minute restore.