Microsoft 365 Backup for Business
Microsoft keeps the service running. Keeping your data is your job. That is the shared responsibility model in one sentence, and it is why a deleted mailbox or a ransomware-encrypted OneDrive can be gone for good once the retention window closes. NetSys sets up Microsoft 365 backup separate from the tenant, runs it daily, and proves it works by restoring from it on a schedule.
The short answer
Microsoft 365 backup is a separate, point-in-time copy of your Exchange Online mailboxes, OneDrive accounts and SharePoint sites, so a deleted mailbox, a ransomware-encrypted OneDrive or a compromised admin account can be rolled back to a chosen date. Microsoft keeps the service running, but under its shared responsibility model your data is yours to protect, and recycle bins and retention settings are not a backup. NetSys selects the product (Microsoft 365 Backup or a third-party tool), confirms exactly what it covers, since Teams content spans several services, then sets retention from your obligations, monitors every job and tests restores each quarter.
A retention policy, a recycle bin and a backup service solve related but different problems. The buying decision starts with the recovery you need: a deleted message, a former employee’s files, an overwritten library or a larger incident. Identify the workloads, the age of the data you may need and who will authorize a restore.
NetSys reviews protection scope, new-user and new-site enrollment, failed jobs and restore procedures. Recovery tests should use representative business data and record what was recovered and how long it took. Compare Microsoft and third-party options on these requirements, including where copies are stored and how administrative access is protected.
Separate Copy, Scheduled Proof
The backup lives in storage that has no dependency on your tenant and no credentials in common with it, so an attacker who owns your global admin cannot delete the copy. Retention is set from your regulatory and insurance obligations, not from a vendor default. Each quarter we restore a sample of mailboxes, files and a full site to a test location and record the result, because a backup that has never been restored is a hope, not a control.
What Microsoft 365 Backup Covers
Exchange Online
Mailboxes, calendars and contacts, including the ones that left.
- Daily backup of user, shared and archive mailboxes with calendars, contacts and tasks
- Departed-user mailboxes retained after the license is removed, without paying to keep the seat
- Item-level restore of a single message or folder, or full mailbox recovery to a point in time
- Search across backed-up mail for legal and HR requests
OneDrive, SharePoint & Teams
Files and conversations recoverable after ransomware or deletion.
- OneDrive and SharePoint document libraries with version history preserved
- Teams channels, chats and the files behind them
- Restore to the original location or to a separate site for review before overwriting
- New sites and users enrolled automatically as the tenant grows
Retention & Security
Kept as long as your obligations require, out of an attacker's reach.
- Retention set to match HIPAA, FINRA, NY DFS, legal hold or insurance requirements
- Backup credentials and storage separated from tenant admin accounts
- Immutable storage options where regulation or policy requires them
- Backup status folded into the same 24/7 monitoring that watches the rest of your environment
Restore Testing & Recovery
Proven on a schedule, run for you when it counts.
- Scheduled restore tests of mailboxes, files and a full site, with results recorded
- Recovery run by NetSys engineers during an incident, coordinated with the disaster recovery plan
- Migration assistance when data has to move between tenants after a merger or divestiture
- Reports that answer the auditor's question about backup frequency and last successful restore
Why Businesses Choose NetSys for Microsoft 365 Backup
Fifteen minutes with a NetSys engineer, not a salesperson, and you will know where your microsoft 365 backup stands and what it would take to fix it. Call 845-203-3914 or request a call to discuss the scope and next steps.
Who does the work: meet the NetSys team on our About page.
- Backup is included in the managed agreement, so no client is left relying on retention settings by accident
- Restores are tested every quarter and the results are written down
- The backup platform has no shared credentials with your tenant, which matters when the tenant is what got compromised
- Recovery is performed by the same engineers who run your disaster recovery plan
- Month-to-month agreement, with an account manager who answers a real cell phone
Where we deliver Microsoft 365 Backup
Microsoft 365 Backup in New York City · Microsoft 365 Backup in Brooklyn, NY · Microsoft 365 Backup in Suffolk County, NY · Microsoft 365 Backup in Philadelphia. We also support clients remotely wherever their systems run. See all locations and service areas.
Microsoft 365 Backup FAQs
Does Microsoft back up Microsoft 365 data?
Not in the way most owners mean. Microsoft keeps replicated copies so the service survives failures in its own data centers, and it gives you recycle bins and retention settings with fixed windows: deleted SharePoint files stay in the recycle bin for 93 days, and a deleted user's mailbox is kept for 30. A copy you can roll back to after ransomware, a malicious admin or a mistake noticed months later is a separate purchase: Microsoft's own Microsoft 365 Backup, billed at $0.15 per GB of protected data per month as of October 2026, or a third-party product. Confirm which one protects your tenant, which data it covers and how far back it can restore.
Why back up Microsoft 365?
Because the data is your responsibility and the built-in safety nets run out. Microsoft's shared responsibility model leaves customer data with the customer in every cloud service, Microsoft 365 included. The losses that follow are ordinary: a departed employee's mailbox gone with the license, a SharePoint library overwritten by a sync mistake, ransomware that encrypts files OneDrive then syncs, an attacker with admin rights deleting what they can reach, or a legal request for mail older than any retention window. A separate backup with tested restores covers each of them.
Can a Microsoft 365 backup recover from ransomware?
Yes, if it holds clean restore points from before the encryption and the attacker cannot reach the backup itself. A OneDrive account or SharePoint site is rolled back to the last clean point, mail items are restored, and content that needs checking is restored to a separate location first. That is why our backup storage shares no credentials with your tenant, and why each quarter's restore test includes a full site.
What is the difference between retention policies and backup?
Retention policies keep content inside the tenant for a defined period so it cannot be permanently deleted, which serves compliance and eDiscovery. Backup is a separate copy stored elsewhere that can rebuild a mailbox or site to how it looked on a given day. Retention does not protect against a compromised admin, does not restore a whole structure quickly, and stops applying when licenses lapse.
Do we need Microsoft 365 backup if we already have a disaster recovery plan?
A disaster recovery plan that does not include the tenant is incomplete, because for most small businesses the tenant is where the business lives. Server backups do nothing for a deleted SharePoint site. We build Microsoft 365 backup into the disaster recovery plan as one of its components, with recovery time objectives set for mail and files alongside servers and applications, so the plan covers the systems people use every day.
How often is Microsoft 365 backed up?
Daily is the default we set for every workload, with more frequent mailbox snapshots available where a firm's tolerance for lost email is low. The schedule is a policy decision we make with you based on how much work you can afford to redo. New users, sites and teams are added to the schedule automatically, so protection does not depend on someone remembering to enroll them.
What does Microsoft 365 backup cost?
NetSys includes Microsoft 365 backup in the all-inclusive managed agreement, so there is no separate line item for it. Businesses that want backup alone, without the rest of the managed stack, can have it quoted as a standalone service; what moves that quote is the number of users and shared mailboxes, the volume of OneDrive and SharePoint data, the retention length and whether immutable storage is required. Microsoft's own Microsoft 365 Backup is billed by storage instead, at $0.15 per GB per month as of October 2026. Either way the agreement runs month to month. Use the contact page or call 845-203-3914 for a quote.
Should we use Microsoft's own backup product or a third-party tool?
Compare the required workloads, restore granularity, retention, recovery speed, storage location, administrator protections and cost. Microsoft 365 Backup and third-party products have different coverage and operating models. NetSys scopes the choice against your recovery requirements and tests the resulting process; neither a product name nor storage in a different location is a substitute for validating recovery.
Sources and technical references
- Microsoft: Microsoft 365 Backup service and recovery documentation
- Microsoft Learn: Microsoft 365 Backup overview, coverage, restore points and per-GB billing
- Microsoft Learn: shared responsibility in the cloud, where customer data stays with the customer
- Microsoft Support: the 93-day SharePoint recycle bin
- Microsoft Learn: deleted Exchange Online mailboxes and the 30-day window
Guides on this topic
- Include cloud data in the business recovery plan
- Define ongoing tenant administration and support
- Protect files during a SharePoint migration
- Microsoft Doesn't Back Up Your Microsoft 365 Data. Read That Again.
- Ransomware Protection
- Backup and Disaster Recovery: 8 Questions SMBs Ask
- cloud-to-cloud backup for a law firm
- The 3-2-1 backup rule, applied to cloud data
- RTO vs RPO: setting recovery targets for mail and files
- What an immutable backup is
Check the protection behind your email and shared files.
Bring the backup product, protected workloads, retention settings and the date of your last restore test. We will identify coverage questions and scope the recovery checks your business needs.