SaaS data
Microsoft 365 backup
Exchange, SharePoint, OneDrive and Teams, backed up on your schedule and restored item by item. Microsoft protects the platform. Your data is your responsibility.
No credit card · 14-day trial · Migration assistance included
The problem
What goes wrong today
30–93 days
The recycle bin is not a backup
Microsoft's own retention windows expire. Once they do, the item is gone — and the window is far shorter than most compliance obligations.
Shared
The responsibility model surprises people
Microsoft guarantees the service, not your content. Deletion, corruption and malicious insiders are explicitly the customer's responsibility in their own documentation.
One mailbox
Restores that mean rebuilding everything
Without item-level recovery, getting one mailbox or one site back means a full tenant-level operation nobody wants to run.
How it works
What Securive does about it
All four workloads, one policy
Exchange Online, SharePoint, OneDrive and Teams — including Teams chat, channels and the files behind them — on the same schedule and retention.
Item-level restore
Recover a single email, a single document version, a channel or a whole site. Restore in place or to a different user.
Retention you control
Keep data for years past whatever Microsoft's own policy allows, on the same versioned storage as every other workload.
Point-in-time views
See a mailbox or a site as it stood on a given date, then restore selectively from it.
Leaver protection
A deleted account's data survives the licence being reclaimed, so offboarding doesn't destroy history.
Search across restore points
Find the item first, then restore it — instead of guessing which date to restore and checking.
Specifics
The technical detail
- Workloads
- Exchange · SharePoint · OneDrive · Teams
- Method
- Agentless, Microsoft Graph API
- Auth
- OAuth app registration, least privilege
- RPO
- Up to 4 backups per day
- Granularity
- Item, folder, site, or whole tenant
- Retention
- 30 days → indefinite by plan
Known limitations
Published deliberately. You would find these during a proof of concept anyway — better to find them now.
- Microsoft's Graph API applies throttling. A first full backup of a large tenant takes days — this is a platform limit, not a product one, and every vendor lives with it.
- Teams private channel history has restricted API coverage on Microsoft's side; what is retrievable is backed up, and the gap is Microsoft's rather than ours.
- Restoring into a mailbox that has since been permanently deleted requires the account to be recreated first.
Recovery scenarios
What actually happens on the bad day
Malware syncs encrypted files into OneDrive
Every synced version is captured. Roll the affected libraries back to the last clean point rather than negotiating with version history.
Files back, without paying anyone.
A leaver's mailbox was purged before anyone checked
The mailbox is retained in backup independent of the licence. Restore it to another user or export it for legal.
Recovered years later if needed.
An admin deleted a SharePoint site on the way out
Site content, permissions and version history are restorable to the point before the deletion, and the audit log shows who did it.
Site restored, evidence intact.
Comparison
Against how you do it today
- Retention
- Today: Microsoft default, 30–93 days
- Securive: Your policy, up to indefinite
- Granularity
- Today: Whole mailbox or nothing
- Securive: Single item, in place or elsewhere
- Leavers
- Today: Data dies with the licence
- Securive: Survives offboarding
- Surviving a leaked key
- Today: Not applicable
- Securive: Versioned storage; the backup key cannot delete a version
- Search
- Today: eDiscovery, if licensed
- Securive: Search across restore points, included
Questions
The things people ask before they switch
Microsoft keeps the service running and replicates for their own availability. Their shared responsibility model puts your content — deletion, corruption, ransomware, insiders — on you. That is their position, not our sales line.
No. A retention policy stops items being purged for a while. It does not give you a point-in-time copy outside the tenant, it expires, and it does not help if the tenant itself is compromised.
An app registration with the least-privilege Graph scopes required for the workloads you enable. No global admin standing access, and you can revoke it in one place.
Days for a large tenant, because Microsoft throttles the API. After that, incrementals complete in minutes. Every vendor is subject to the same limit.
Yes for a different user. Cross-tenant restore is supported on Enterprise and is normally used in a merger or divestiture.
Find out whether your backups actually restore.
Connect one hypervisor, set one policy, and let a scheduled drill try to bring it back. If it doesn't, you'll know in a day rather than during an incident.
No credit card · 14-day trial · Migration assistance included