Microsoft runs a resilient service, but resilience of the platform is not the same as recovery of your data. Accidental deletion, malicious insiders, ransomware that syncs to the cloud and retention gaps are your responsibility.
Scenarios where a backup helps
- A departing employee deletes mail and files.
- Ransomware encrypts OneDrive or SharePoint files that sync from an infected laptop.
- You need an old version after the recycle bin period has passed.
- A legal or audit request needs data that has been purged.
What to back up
Exchange mailboxes, OneDrive, SharePoint sites and Teams data, plus the configuration of your tenant where tools allow.
How to choose
- Retention that matches your policies
- Granular restore of single items
- Immutable storage so attackers cannot delete backups
- Clear data residency for regulated data
Test restores at least twice a year. A backup you have never restored is a hope, not a plan.