In short, no. Microsoft Office 365 does not back up your data.
This is a commonly asked question, and there is a prevailing misconception that Office 365 acts as a backup solution out of the box. It does not.
Microsoft has built in redundancy and backups in all of their data centers, and they replicate their data in at least 2 geographic locations. But these backups are for internal data center recovery only.
This is done to ensure that Microsoft can maintain 99.9% uptime of their services in the event of hardware failure and software bugs, but this data is not available to customers for restoring their data.
Essentially, Microsoft replicates your data and stores it in multiple locations to make sure it’s still available to you if there’s an issue with their infrastructure. But if you delete something accidentally, or it’s maliciously targeted and encrypted or deleted, the same goes for all of your replicated data too.
And it cannot be recovered. So, Microsoft does not backup Office 365 in the way you need it to.
If you don’t have a backup solution for your Office 365 data, your company is vulnerable to threats that can cause significant and irreversible data loss, as well as other damaging ramifications. Such as:
- Accidental deletion
- Malicious user deletion
- Ransomware and other cyber security threats
- Legal compliance failures
- Retention policy gaps
For deleted data, some of Microsoft’s services allow you to recover the data for certain time periods. For instance, items deleted in SharePoint Online stay in the recycle bin and can be recovered up to 93 days before they are purged. And individual emails deleted from Exchange Online can be recovered for up to 30 days.
However, if an employee’s Office 365 data is infiltrated by a ransomware attack and your data is encrypted, all of Microsoft’s redundant versions of the data will also reflect this encryption.
Even if Microsoft were to implement a full restore of a library or mailbox to a previous point in time, all of the data from the point of the breach to the present will be overwritten. This provides some help in the event of a ransomware attack, but doesn’t work for recovering individual files.
Without a backup solution in place, significant data loss is unavoidable.
You need to backup your Office 365 data with a third-party solution.
Microsoft even recommend it in their service agreement:
“We recommend that you regularly backup your Content and Data that you store on the Services using Third-Party Apps and Services.”
A backup of your Office 365 data should be a critical part of your company’s disaster recovery plan. Best practice is to back up your Office 365 data in a separate cloud environment.
This is absolutely necessary to protect your company against cyber threats and the threat of data loss and it can also ensure that you remain compliant with data retention policies and legal requirements, preventing possible litigation in certain circumstances.
We provide a completely outsourced cloud backup solution for Office 365 through our Infrastructure as a Service (IaaS). CloudCore. CloudCore, is one of the most advanced and innovative, secure and high-performance public cloud platforms available – and the first to be designed with data privacy and data sovereignty at its heart, and is also the foundation of our completely outsourced cloud backup solution. Your data is backed up automatically to any other nominated datacentre in our network, where it is monitored and supported 24/7/365 by Calligo’s managed services team.
“Calligo’s greatest strength in our selection process was their heritage in the cloud and data residency. They also had the experience in cloud-based disaster recovery and back-ups enabling them to meet our requirements over scheduling, site duplication and recovery time and recovery point objectives.”
Nick Marquis, IT & Operations Manager at Aspida
Through CloudCore you can affordably backup all of your company’s data, protect your business from the threat of data loss with real-time backups, and get your company back up and running as quickly as possible if disaster strikes.