How does Microsoft 365 data backup and recovery work?

Microsoft 365 Backup and Data Protection

### What Microsoft Does NOT Protect Against

• Accidental deletion by users
• Ransomware attacks
• Malicious insiders

### Built-in Recovery Limits

• **Deleted emails:** Recoverable for up to **30 days** from admin console
• **Deleted files (OneDrive/SharePoint):** Recycle bin holds for **93 days**
• **Deleted users:** Recoverable for **30 days**

### Setting Retention Policies

1. Go to compliance.microsoft.com

2. Data lifecycle management → Retention policies → New

3. Apply to Exchange, SharePoint, OneDrive, Teams

### Litigation Hold

Exchange Admin Centre → Mailboxes → User → Litigation hold → Enable

Data cannot be permanently deleted while hold is active.

### Third-Party Backup (Recommended)

For true protection, use Veeam, Acronis, or Backupify — provides point-in-time restore beyond Microsoft's native retention.