Ask your IT team whether your Microsoft 365 data is backed up. You will usually get a confident yes.
Then ask a follow-up. What happens if your finance director deletes a mailbox folder in March and nobody notices until June? The confidence tends to fade around that point.
Microsoft 365 retention policies preserve data for compliance. They do not restore it. Under Microsoft’s shared responsibility model, Microsoft guarantees platform availability and infrastructure resilience while you remain responsible for the data itself. Standard Microsoft 365 licenses do not include a backup solution, and the native recovery windows are shorter than most organizations assume.
Does Microsoft Back Up Your Microsoft 365 Data?
Not in the way the word is normally used.
What the platform gives you is a set of recovery windows. Deleted items sit somewhere for a defined period, then they are gone. Useful, but not a backup.
A backup is an independent, point-in-time copy that can be restored to a known good state after the fact. A recycle bin is a delay before permanent deletion. That difference stays theoretical right up until it isn’t: ransomware encrypting synced content, a departing employee clearing out a mailbox, a retention policy misconfigured and pushed tenant-wide, or a quiet deletion that surfaces four months later.
Retention labels and litigation holds add preservation, which is genuinely useful and constantly mistaken for protection. A hold stops data from being purged. It will not roll your SharePoint library back to how it looked last Tuesday.
Why This Surfaces During Migrations
Nobody tests these assumptions on a normal Tuesday. A cutover forces the issue.
Data moves, source systems get decommissioned, and someone on your team asks three months later where the pre-migration state went. We see the same three things: archives stranded on a server nobody switched off, retention policies never rebuilt for the destination tenant, and a recovery expectation that was never accurate to begin with. Our work on data archival planning and implementation covers how to set that baseline before a migration rather than after, and our guidance on protecting sensitive information during Office 365 migrations covers the controls that belong in the plan.
Frequently Asked Questions
Q: Does Microsoft back up my Microsoft 365 data? A: Not under a standard license. Microsoft’s shared responsibility model covers platform availability and infrastructure resilience. The data remains yours to protect, through the native add-on or a third-party tool.
Q: How long can deleted data actually be recovered? A: In Exchange Online, purged items stay in the Recoverable Items folder for 14 days by default, extendable by an administrator to 30 days maximum. In SharePoint Online and OneDrive, deleted items stay in the site and site collection Recycle Bins for a combined 93 days, and that period is not configurable.
Q: Isn’t a retention policy the same as a backup? A: No. Preservation stops data from being purged. It does not create a restore point, and it cannot return your site or mailbox to a previous state.
Q: What does Microsoft 365 Backup cost and cover? A: It is a pay-as-you-go add-on billed through Azure at $0.15 per GB per month of protected content, with restores included and data retained for 365 days. Exchange restore points are captured every 10 minutes across the prior year. For SharePoint and OneDrive, restore points older than two weeks become weekly snapshots.
Q: What about Teams chat? A: Teams messages live in hidden mailbox folders that end users cannot restore from, so confirm your coverage explicitly rather than assuming it. Under FRCP Rule 37(e), collaboration data carries the same spoliation exposure as email.
How Messaging Architects Can Help
We assess what your tenant actually protects, where retention ends and recovery begins, and which regulatory obligations need more than native tooling delivers. Not sure where your tenant’s protection stands? Talk to our team and we’ll walk through what your data needs.
Test a restore before you need one. That exercise settles the question faster than any policy document will.
