Does Microsoft 365 already include recovery mechanisms?

Yes. Recycle bins, versions, Files Restore and retention policies all exist, with different windows and purposes.

How long is the SharePoint recycle-bin period?

Microsoft documents a total of 93 days across the two recycle-bin stages, subject to retention and other mechanisms.

What is the Files Restore window?

The native Files Restore capability for OneDrive and SharePoint covers a 30-day window.

Is Microsoft 365 Backup a separate service?

Yes. It is a dedicated pay-as-you-go backup and recovery offering for Exchange Online, SharePoint and OneDrive.

What recovery window does Microsoft 365 Backup offer?

Policies can be configured for 3 months, 6 months, 1 year or 2 years.

Are backup and retention the same?

No. Retention is mainly about preserving content under rules; backup is designed around recovery and continuity.

Microsoft 365 Backup: When Does It Make Sense?

Retention, recovery and backup are not the same thing.

Microsoft 365 includes several native resilience layers. SharePoint deleted items move through a recycle-bin flow for a total of 93 days; OneDrive and SharePoint provide Files Restore to return to an earlier state within a 30-day window; and Microsoft Purview retention policies can preserve content according to organisational rules.

These capabilities solve many everyday incidents. Dedicated backup answers a different question: what data must be recoverable, from which point in time, for how long and how quickly must the business return to operation?

The right question

Instead of asking only “does Microsoft 365 back up my data?”, ask: how much history do I need, how long can I be down and which recovery scenarios must I be able to handle?

Retention

Preserves content according to governance, compliance or lifecycle rules.

Native recovery

Restores deleted items, versions or recent states within supported windows.

Dedicated backup

Creates a recovery-oriented protection policy with defined recovery points and windows.

What can Microsoft 365 already recover natively?

SharePoint: 93-day recycle flowDeleted items remain across the two SharePoint recycle-bin stages for a total of 93 days, subject to other policies.

Files Restore: 30 daysSharePoint and OneDrive can return to an earlier state using versions within the 30-day Files Restore window.

Retention policiesRetention policies and labels can preserve copies of content even when users change or delete the original.

Deleted-user OneDriveThe OneDrive retention period after a user is deleted is configurable and should be planned as part of the leaver process.

MICROSOFT 365 BACKUP

Microsoft 365 Backup: a dedicated recovery layer.

Microsoft now provides Microsoft 365 Backup for Exchange Online, SharePoint and OneDrive. It is a pay-as-you-go service, separate from the normal per-user licensing model. The recovery window can be configured per policy for 3 months, 6 months, 1 year or 2 years.

Exchange OnlineRecovery points with a 10-minute target frequency throughout the supported policy window.

SharePoint / OneDriveVery frequent points for the most recent two weeks, with weekly snapshots for older periods documented by Microsoft.

RecoveryMailbox/item restore in Exchange and site/account rollback for SharePoint and OneDrive, depending on scenario.

When does dedicated backup start to make sense?

SCENARIO 01

Ransomware or malicious deletionWhen large amounts of data may need to be returned to a known healthy state without file-by-file manual recovery.

SCENARIO 02

Defined RPO and RTOWhen the business needs to specify how much data it can lose and how quickly service must return.

SCENARIO 03

Microsoft 365 is operationally criticalWhen Exchange, OneDrive or SharePoint are essential to daily work and slow recovery would materially affect operations.

SCENARIO 04

Predictable recovery historyWhen the organisation needs a clear policy for recovery window and available restore points.

SCENARIO 05

Joiners and leaversWhen former-user information must remain recoverable independently of the account lifecycle.

SCENARIO 06

Recovery at scaleWhen an incident may affect multiple sites, accounts or mailboxes and a planned restore workflow matters.

Retention matters, but it was designed for a different objective.

Retention policies help preserve information for legal, compliance or governance purposes. In SharePoint and OneDrive, protected content can be preserved in the Preservation Hold Library; Exchange uses Recoverable Items for retained content. This differs from designing a backup policy around operational recovery and continuity.

RPO and RTO turn “backup” into a business decision.

RPO is the maximum amount of data the organisation accepts losing between recovery points. RTO is the maximum acceptable time to restore the service. A business that tolerates a day of loss and a day of recovery has very different needs from one requiring frequent recovery points and restoration within hours.

PCenter

How PCenter should frame the decision

Start with what is critical: mailboxes, OneDrive, SharePoint, applications and business information. Then define recovery windows, priorities, retention and restore testing.

What to protectExchange, OneDrive, SharePoint and other genuinely critical data.

How much historyDays, months or years of recoverability.

How quicklyPriority and acceptable time to return to work.

How to testRegular restore tests to prove recovery works.

Microsoft 365 backup: when does it make sense?