Think Office 365 doesn’t need backup? Think again

“We’re on Office 365 so we don’t need backup”

We hear this all the time – unfortunately, that’s simply not true. Here are the most common misconceptions surrounding this topic:

  1. Being in the cloud means your data is secure
  2. Being in the cloud means everything is backed up
  3. O365 backup isn’t necessary or critical

This article is going to focus in on misconception #3 but if you’d like more information on #1 and #2, click here.

Before diving in, I’d like to start by saying that if you believed misconception #3 before reading this article, don’t feel naïve. O365 backup is confusing – confusing because yes, O365 does have backup, but no, their limited backup will not meet your business needs.

Where’s the O365 backup gap?

The most simple way to look at this is: Microsoft takes responsibility for backing-up what they need to to be able to provide their service. This leaves their clients responsible for backing up what they do using their service. In other words, Microsoft is responsible for the infrastructure – uptime, regulatory attestations at the infrastructure level, etc. You are responsible for your data – making copies of the data, managing control and regulatory processes for your data , etc.

Examples of the gap:

  • Many employees use their deleted mailbox as a storage folder that they expect they can access anytime. However, on O365, deleted files will only be accessible for a short period of time before the data is permanently deleted.
  • If you delete a user so you can reassign their license, on O365, their data and emails (which may be needed to support clients, move forward on projects, or provide evidence for employment or other legal disputes) will only be accessible for a short period of time before the data is permanently deleted.
Sources of risk in the gap

If your business does not have an additional O365 backup solution, you are at risk from:

  • Accidents and user error
  • Malicious employees
  • Malware and viruses
  • Legal compliance in your retention policies
The solution

The best approach is to simply treat O365 like you would treat the data if it were stored onsite. Start by deciding your data protection policy for your business as a whole. Then implement your policy across the board including for your O365 environment – which will more than likely involve additional backup that is incremental to your O365 subscription.

Need help? We’re here!

As an end-to-end IT solutions provider, Able One can help with O365 backup and with holistic backup solutions for on site and cloud storage. Contact us for more information or for free consultation on the best backup solutions for your business.

Able One Team Headshots18

Written by Melanie Magier

Marketing Manager, Able One

Like our content? Keep us in your feed


A beginner-friendly understanding of the gaps in Office 365 backup and why additional backup is essential.