Skip to content
Securive

SaaS data

Microsoft 365 backup

Exchange, SharePoint, OneDrive and Teams, backed up on your schedule and restored item by item. Microsoft protects the platform. Your data is your responsibility.

No credit card · 14-day trial · Migration assistance included

The problem

What goes wrong today

30–93 days

The recycle bin is not a backup

Microsoft's own retention windows expire. Once they do, the item is gone — and the window is far shorter than most compliance obligations.

Shared

The responsibility model surprises people

Microsoft guarantees the service, not your content. Deletion, corruption and malicious insiders are explicitly the customer's responsibility in their own documentation.

One mailbox

Restores that mean rebuilding everything

Without item-level recovery, getting one mailbox or one site back means a full tenant-level operation nobody wants to run.

How it works

What Securive does about it

All four workloads, one policy

Exchange Online, SharePoint, OneDrive and Teams — including Teams chat, channels and the files behind them — on the same schedule and retention.

Item-level restore

Recover a single email, a single document version, a channel or a whole site. Restore in place or to a different user.

Retention you control

Keep data for years past whatever Microsoft's own policy allows, on the same versioned storage as every other workload.

Point-in-time views

See a mailbox or a site as it stood on a given date, then restore selectively from it.

Leaver protection

A deleted account's data survives the licence being reclaimed, so offboarding doesn't destroy history.

Search across restore points

Find the item first, then restore it — instead of guessing which date to restore and checking.

Specifics

The technical detail

Workloads
Exchange · SharePoint · OneDrive · Teams
Method
Agentless, Microsoft Graph API
Auth
OAuth app registration, least privilege
RPO
Up to 4 backups per day
Granularity
Item, folder, site, or whole tenant
Retention
30 days → indefinite by plan

Known limitations

Published deliberately. You would find these during a proof of concept anyway — better to find them now.

  • Microsoft's Graph API applies throttling. A first full backup of a large tenant takes days — this is a platform limit, not a product one, and every vendor lives with it.
  • Teams private channel history has restricted API coverage on Microsoft's side; what is retrievable is backed up, and the gap is Microsoft's rather than ours.
  • Restoring into a mailbox that has since been permanently deleted requires the account to be recreated first.

Recovery scenarios

What actually happens on the bad day

Ransomware

Malware syncs encrypted files into OneDrive

Every synced version is captured. Roll the affected libraries back to the last clean point rather than negotiating with version history.

Files back, without paying anyone.

Accidental deletion

A leaver's mailbox was purged before anyone checked

The mailbox is retained in backup independent of the licence. Restore it to another user or export it for legal.

Recovered years later if needed.

Malicious insider

An admin deleted a SharePoint site on the way out

Site content, permissions and version history are restorable to the point before the deletion, and the audit log shows who did it.

Site restored, evidence intact.

Comparison

Against how you do it today

Retention
Today: Microsoft default, 30–93 days
Securive: Your policy, up to indefinite
Granularity
Today: Whole mailbox or nothing
Securive: Single item, in place or elsewhere
Leavers
Today: Data dies with the licence
Securive: Survives offboarding
Surviving a leaked key
Today: Not applicable
Securive: Versioned storage; the backup key cannot delete a version
Search
Today: eDiscovery, if licensed
Securive: Search across restore points, included

Questions

The things people ask before they switch

Microsoft keeps the service running and replicates for their own availability. Their shared responsibility model puts your content — deletion, corruption, ransomware, insiders — on you. That is their position, not our sales line.

No. A retention policy stops items being purged for a while. It does not give you a point-in-time copy outside the tenant, it expires, and it does not help if the tenant itself is compromised.

An app registration with the least-privilege Graph scopes required for the workloads you enable. No global admin standing access, and you can revoke it in one place.

Days for a large tenant, because Microsoft throttles the API. After that, incrementals complete in minutes. Every vendor is subject to the same limit.

Yes for a different user. Cross-tenant restore is supported on Enterprise and is normally used in a merger or divestiture.

Find out whether your backups actually restore.

Connect one hypervisor, set one policy, and let a scheduled drill try to bring it back. If it doesn't, you'll know in a day rather than during an incident.

No credit card · 14-day trial · Migration assistance included