.svg){kind=icon}
.svg){kind=icon}
.svg){kind=icon}
Microsoft 365 has become the backbone of how many New Zealand businesses operate. Emails, files, Teams chats, SharePoint data — it’s all there.
But there’s a common (and risky) assumption we hear often:
“It’s in the cloud, so it must already be backed up.”
Unfortunately, that’s not quite true.
This is an important message for organisations that store valuable information inside their 365 and for those with regulatory or legal requirements to retain data.
Microsoft Protects the Platform — Not Your Data
Microsoft 365 is excellent at keeping its services running. Your data is stored across multiple data centres, and outages are rare.
But that’s availability, not backup.
Microsoft operates on a shared responsibility model, which means:
Microsoft looks after the infrastructure
You are responsible for your data
That distinction matters more than most people realise.
Where Things Can Go Wrong
In day-to-day business, data loss usually isn’t dramatic — it’s ordinary.
Here are the most common scenarios we see:
1. Accidental Deletion
Someone deletes an email, folder, or file — and it’s not noticed until weeks or months later.
By then, recovery options are limited or gone.
2. Staff Changes or Mistakes
Users leave, accounts are removed, or data is cleaned up incorrectly.
Important information can disappear permanently.
3. Ransomware and Sync Issues
If ransomware encrypts files on a device, that encryption can sync straight into OneDrive or SharePoint.
Now your “backup” is also encrypted.
4. Retention Limits
Microsoft does have recycle bins and retention policies — but:
They are time-limited
They require correct setup
They don’t always cover every scenario
Recent industry reporting continues to highlight that many organisations overestimate how recoverable their Microsoft 365 data actually is, particularly when incidents occur outside standard retention windows.
5. Limits to What Can be recovered from Microsoft
While Microsoft 365 keeps your data available, it doesn’t guarantee you can fully recover it — especially things like older versions, deleted data, permissions, and the way everything is structured and linked together. In many cases, you can get files back, but not your system back the way it was.
What a Proper Microsoft 365 Backup Gives You
A dedicated backup solution fills these gaps.
It allows you to:
Restore data from any point in time
Recover individual emails, files, or entire mailboxes
Roll back after ransomware or large-scale deletion
Keep data even after users are removed
In short, it gives you control and certainty.
And importantly, it allows you to recover quickly when something goes wrong — without relying on limited retention windows or complex recovery processes.
Even Microsoft themselves recommend that customers regularly back up their data outside the platform. This independent article explains the shared responsibility model clearly - https://www.nakivo.com/glossary/backup-responsibility-microsoft-365
At GTB, we use a Microsoft 365 backup system built on dedicated technology. This allows us to take secure, independent backups of your data and restore it quickly when needed — whether that’s a single email, a folder, or an entire mailbox or SharePoint site.
The key difference is that this isn’t just a download of your files — it’s a full backup, preserving structure, history, and recoverability.
“You’ll Probably Never Need It… But…”
This is something we often say to clients:
The chances are you’ll never need to use your Microsoft 365 backup. But the ones who do need it are very glad they had it.
Backup isn’t just about expecting disaster — it’s about being prepared for the real-world, often small, issues that happen in every organisation.
Is It Worth It for Your Business?
For most SMEs and not-for-profits, the answer comes down to one question:
How important is your Microsoft 365 data to your operations?
If you rely on:
Email for communication
SharePoint or OneDrive for files
Teams for collaboration
Or, if you have legal or regulatory requirements to retain data
…then losing that data (even partially) would be disruptive at best — and damaging at worst.
In that context, backup is a relatively low-cost way to reduce a high-impact risk.
How This Fits into Disaster Recovery
Microsoft 365 backup is just one part of a wider resilience strategy.
At GTB, we look at the bigger picture — including:
Device and server backup
Cybersecurity protection
Recovery planning
You can learn more about how this fits together here:
👉 https://gtb.co.nz/services/disaster-recovery
Final Thoughts
Cloud services like Microsoft 365 are incredibly reliable — but they don’t eliminate the need for backup.
They just change where the responsibility sits.
If your business depends on Microsoft 365 (and most do), then having a proper backup in place is simply good practice.
Not sure whether your current setup is protected?
We’re happy to review it with you and give clear, practical advice — no jargon, no pressure.
