Microsoft 365 Backup: What Microsoft Keeps, What It Costs and When a Third-Party Tool Wins

By The Uptime Report Team · Last reviewed: October 2026

Microsoft 365 backup is not automatic: recycle bins keep deleted files 93 days and permanently deleted mail 14 to 30 days, while Microsoft 365 Backup adds 10-minute restore points for $0.15 per GB per month.

Does Microsoft back up Microsoft 365 data?

Microsoft keeps Microsoft 365 running and replicates the current copy of your data, but recovering deleted or encrypted content is the customer’s job. Microsoft’s shared responsibility page names Microsoft 365 as a SaaS example and says the customer always retains responsibility for “your data, including data classification, data protection, encryption decisions”.

The Microsoft 365 Backup FAQ (updated September 29, 2026) repeats the point. Asked whether its stance on shared responsibility has changed, Microsoft answers: “No, we still have the same point of view, but are now offering more tools to help organizations achieve those goals and responsibilities.” The same FAQ says a disaster recovery copy “maintains the current state of content, not any historical versions from prior points in time.”

Many vendor guides quote section 6.b of the Microsoft Services Agreement (effective September 30, 2026): “We recommend that you regularly backup Your Content and Data that you store on the Services.” That agreement covers consumer services. Its FAQ says it “does not apply to products and services dedicated to volume licensing customers, including Microsoft 365 for enterprise, education, or government customers.” For a business tenant, cite the shared responsibility page and the Backup FAQ instead.

How long does Microsoft 365 keep deleted data without a backup?

Without a backup product, most deleted Microsoft 365 data is purged after 14 to 120 days, depending on the workload. SharePoint and OneDrive recycle bins hold items for 93 days from deletion. Exchange Online keeps permanently deleted mail in Recoverable Items for 14 days by default, adjustable to 30. Deleted user accounts can be restored for 30 days, and every window below comes from Microsoft documentation accessed in October 2026.

Recoverable Items also has a 30 GB hard quota (100 GB on hold), and when the warning quota is reached before 14 days pass, Exchange deletes the oldest items first, per the Recoverable Items documentation.

Which built-in tools retain data but are not backups?

Version history, Litigation Hold and Purview retention policies keep copies of content, but the Backup FAQ (updated September 29, 2026) says none of them is built for mass restore. The table pairs each of the 4 tools with Microsoft’s own explanation of the gap.

Litigation Hold needs an Exchange Online Plan 2 license, or Plan 1 plus Exchange Online Archiving, per Microsoft Learn. The Exchange Online Archiving service description lists Business Basic and Business Standard as add-on plans and Business Premium as already including archiving, so on a Basic or Standard client, quote the archiving add-on before promising a hold; our Microsoft 365 business plans comparison has the tier prices.

What is Microsoft 365 Backup and what does it cover?

Microsoft 365 Backup is Microsoft’s own pay-as-you-go backup service for OneDrive accounts, SharePoint sites and Exchange Online mailboxes, managed in the Microsoft 365 admin center. It stores restore points inside Microsoft 365 on append-only storage, offers a 10-minute recovery point objective, and keeps restore points for a recovery window of 3 months, 6 months, 1 year or 2 years per policy.

The 10-minute figure is a versioning interval, not a snapshot schedule: the Backup FAQ says changes within 10 minutes become one version and “all deletions are backed up.”

What does Microsoft 365 Backup not cover?

Microsoft 365 Backup protects three workloads and two mailbox types, so several common data sets fall outside it. The Backup FAQ and overview, updated in August and September 2026, list these gaps; check each one against your tenant before you assume a policy covers everything users touch in Teams, Exchange and Entra ID.

• Room and group mailboxes: only user and shared mailboxes are supported, per the Backup FAQ.
• Five SharePoint templates: SharePoint Embedded containers (CSPCONTAINER#0), Review Center (REVIEWCTR#0), Policy Center (POLICYCTR#0), the tenant admin site (TENANTADMIN#0) and the MySite host (SPSMSITEHOST#0).
• Teams as a workload: Teams channel files sit in SharePoint, and each private or shared channel has its own site, per Microsoft Learn, so add those sites to a SharePoint policy.
• Entra ID: Microsoft Entra ID is not among the three listed workloads, so directory objects need a separate tool.

How fast does Microsoft 365 Backup restore data?

Microsoft publishes median restore times of 30 minutes for one OneDrive account or SharePoint site using an express restore point, and 2 hours for one Exchange mailbox. At 250 protection units the medians are 4 hours and 3 hours. Bulk restores of 1,000 or more units run at up to 250 units per hour and up to 2 TB per hour at the median.

Bulk figures assume 12 GB sites and 10 GB mailboxes restored in place; a standard restore point “may be significantly slower” than an express one. If a client contract promises a 1-hour recovery time objective for a single mailbox, these 2-hour medians already break it; set the target in your backup and disaster recovery plan from the table, not from the 10-minute RPO.

How much does Microsoft 365 Backup cost?

Microsoft 365 Backup costs $0.15 per GB per month of protected content at list price, billed pay-as-you-go through an Azure subscription, with no per-user license. Restores are free and Microsoft states there are no extra Azure API or storage charges. The billable size includes more than live data: online archives, the second-stage recycle bin and deleted or versioned mail all count.

Microsoft’s own example: a protected 1 GB site with 0.5 GB in its second-stage recycle bin, plus a 1 GB mailbox with a 1 GB online archive, bills as 3.5 GB. Deleting data does not cut the bill right away; a 1 GB site trimmed to 0.5 GB still bills as 1 GB until the deleted content ages out of the recovery window.

Worked example: what does a 50-user tenant pay?

Price a real tenant from three admin center usage reports and two PowerShell checks, then multiply protected GB by $0.15. As an illustration, a 50-user tenant protecting 1,750 GB pays $262.50 a month, or $3,150 a year ($5.25 per user), on a 3-month recovery window, and about $285.00 a month at the 1-year window existing policies default to.

1. Live OneDrive, SharePoint and mailbox sizes: in the Microsoft 365 admin center, open Reports, Usage, then OneDrive usage, SharePoint site usage and Exchange mailbox usage.
2. Online archives: run “Get-MailboxStatistics -Archive” per mailbox; the usage reports leave archives out.
3. Second-stage recycle bins: run “Get-PnPRecycleBinItem -SecondStage”; the admin center omits these too, per Microsoft’s pricing page.
4. Apply the formula: protected GB x $0.15 = monthly cost; divide by licensed users for the per-user figure you compare with the break-even table below.

The illustration uses Microsoft’s benchmark averages of 10 GB per mailbox and 12 GB per site; replace the labeled assumptions with your own report figures.

What moves the Microsoft 365 Backup bill?

The recovery window moves the bill through deleted data. Microsoft’s pricing page calls the second-stage recycle bin “a general heuristic for the amount of data your tenant churns over a three-month period.” Applying that heuristic to the 50 GB above gives the Uptime Report estimates in the table; Microsoft’s calculator itself assumes no growth or churn.

Removing an account from a policy does not cut cost either: Microsoft bills the size at removal until its restore points expire, per the Backup pricing page.

Is Microsoft 365 Backup cheaper than a third-party backup?

Microsoft 365 Backup is cheaper than per-user tools only while protected data stays small. Across the five vendors we found with a public per-user price, the break-even at $0.15 per GB runs from 2.8 GB per user (CubeBackup, storage extra) to 46.7 GB (Veeam Premium); most cloud plans sit between 11.1 GB and 23.3 GB. The 50-user illustration averages 35 GB per user.

AvePoint, Keepit, Commvault, Druva, SysCloud and CloudAlly showed no per-user price on their pricing pages in October 2026, so they are not priced here. If Spin.ai’s stated $5,000 a year minimum applies to SpinBackup, it equals about 139 users at $3, so smaller tenants pay more than the list rate per user.

Microsoft’s copy stays inside the service it protects, while a third-party or NAS copy is the separate copy the 3-2-1 backup rule asks for. Before quoting a flat backup seat inside a per-user managed IT contract, check the client’s real GB per user against this table.

What do Microsoft 365 backup guides get wrong?

Four claims in ranking guides do not match Microsoft’s current documentation: a single 14-day or 30-day retention figure for all of Microsoft 365, the consumer Services Agreement cited for business tenants, a 15-minute SharePoint recovery point, and a fixed 1-year backup duration. The table quotes each guide as published and the primary source as of October 2026.

How do MSPs run Microsoft 365 Backup across client tenants?

An MSP runs Microsoft 365 Backup one client tenant at a time. Each tenant needs a billing policy tied to an Azure subscription “in the same tenant as Microsoft 365,” and we found no multi-tenant console in Microsoft’s Backup documentation. The alternative is a vendor product built on Microsoft 365 Backup Storage, where Microsoft bills the vendor and the vendor bills you.

Which access and billing setup should an MSP use?

Ask the client, through GDAP, for the Microsoft 365 Backup Administrator role, which Microsoft’s role reference says can “manage all aspects of Microsoft 365 Backup,” plus Contributor on the Azure subscription that pays. GDAP grants Entra roles for a set “Duration in days.” Microsoft’s GDAP workloads page (updated March 19, 2025) does not list Microsoft 365 Backup, so prove the role works in one client before you sign the rest.

• Client pays Microsoft directly: the client’s own Azure subscription and card. Simplest to bill, but if the billing account turns “unhealthy,” offboarding starts and the 90-day grace clock runs, per Microsoft’s offboarding page. Write into the contract who watches that card.
• MSP resells through CSP: Microsoft’s GDAP guidance says that when a partner buys an Azure plan for the customer, the partner’s Admin Agents group becomes Owner of that subscription. Backup’s written requirement is only “an Azure subscription in the same tenant,” so confirm in a pilot that a CSP Azure plan works, then invoice per GB with a budget alert on the billing policy.
• Vendor product on Backup Storage: Microsoft bills the vendor and the vendor sets the client price; Veeam’s Backup Storage-based Premium plan lists at $7.00 per user per month.

Microsoft’s Backup Storage partner page names six vendor products built on Backup Storage and calls them “not endorsed or certified from a technical standpoint by Microsoft.” What each adds, in the page’s own descriptions:

What should an MSP configure so backups survive a rogue admin?

Set the approver roster, the notification list and the recovery window in every client tenant before go-live, because each control has a fixed delay that only helps if someone watches it. Microsoft added two-person approval for faster deletion on October 1, 2026, and 365-day activity logs on October 13, 2026, per What’s new in Microsoft 365 Backup.

Which Microsoft 365 backup option should you choose?

Choose by recovery need first and price second. Native retention covers single deletions inside 14 to 93 days. Microsoft 365 Backup fits tenants that need point-in-time rollback of whole sites or mailboxes and average under about 23 GB per user. A third-party or NAS backup fits tenants that need a copy outside Microsoft 365, Entra ID protection or per-user billing above that threshold.

How do you set up Microsoft 365 Backup?

Setup takes an Azure subscription in the tenant, an admin with the right role and one backup policy per workload. Microsoft’s Backup overview says a new policy takes up to 60 minutes to process and another 60 minutes to create restore points, and initial backups run at about 15 minutes per 1,000 protection units.

1. Role: SharePoint Administrator, Global Administrator or the Microsoft 365 Backup Administrator role; granular file restores also need the SharePoint Backup Admin role.
2. Billing: in Billing, Pay-as-you-go, create a billing policy on the tenant’s Azure subscription and connect Microsoft 365 Backup, per the setup guide.
3. Policies: in Settings, Microsoft 365 Backup, create one policy each for OneDrive, SharePoint and Exchange, within 100 policies and 100,000 items per policy.
4. Recovery window: pick 3 months, 6 months, 1 year or 2 years; decreases take effect only after a 30-day grace period.
5. Test a restore: express restore points bring back full sites under about 1 TB in under 20 minutes; restore to a new URL to keep the live site untouched.

Microsoft says backups are immutable “unless expressly deleted by the Backup tool admin via product offboarding,” so accounts holding that role need phishing-resistant sign-in, covered in our Microsoft 365 security guide. A client leaving Microsoft 365 should export data before offboarding starts the 90-day deletion clock; our guide to canceling Microsoft 365 for business covers that exit.

How we compiled this

We compiled this from 37 primary documents accessed in October 2026: 31 Microsoft Learn, Microsoft Support, Microsoft adoption and Microsoft legal pages, and the public pricing or product pages of Veeam, Afi, IDrive, CubeBackup, Spin.ai and Synology. Three competitor guides (Acronis, Petri and LazyAdmin) are quoted only in the corrections table. Third-party prices are list prices as displayed on each vendor’s own page; quote-only vendors are named but not priced. The 50-user example and recovery-window estimates are our arithmetic on stated assumptions, not measurements from a real tenant, and we did not test any product.

Frequently asked questions

Can Microsoft 365 Backup restore a single file or email?

Yes. Exchange restores already allow single mail, contact, calendar and task items. For OneDrive and SharePoint, Microsoft made granular restore generally available on September 2, 2026: admins browse or search a restore point, pick files and folders, and restore to the original location or a new timestamped folder, per What is new in Microsoft 365 Backup. It needs the SharePoint Backup Admin role; the overview’s feature table still says coming soon.

Does Microsoft 365 Backup protect against a compromised Global Admin?

Partly. A Global Admin can offboard backups, but deletion waits out a 90-day grace period, and shortening it to 7 days needs two approvers who each passed a 2-day aging window, per the offboarding page. Turn on the daily notification digest so offboarding and paused policies reach someone outside the compromised account.

Can eDiscovery search Microsoft 365 Backup data?

No. Microsoft’s privacy and security page says Exchange Online backups are not eDiscoverable, and OneDrive or SharePoint data that exists only in backups is not found by an eDiscovery search. GDPR deletion requests also do not delete backup copies; Microsoft says to run them again after a restore so the original request is honored.

Can Microsoft 365 Backup protect new users and sites automatically?

Yes, two ways. Dynamic rules based on distribution lists add a new member within a day. Full Workload Backup, in preview since September 18, 2026, protects eligible sites, OneDrive accounts or mailboxes not in a custom policy, checks every 24 hours and accepts up to 10,000 exclusions in one operation, per Microsoft Learn.

Does a Microsoft 365 Backup restore overwrite newer changes?

A full OneDrive or SharePoint restore to the same URL rolls the site back and overwrites all content and metadata changed since that restore point, per the Backup overview. Restoring to a new URL avoids that. Exchange restores bring back only modified or deleted items from the chosen point, so newer mail stays in place.

Is Microsoft 365 Backup available for GCC and multi-geo tenants?

Yes. Microsoft lists Microsoft 365 Backup as available for Government Community Cloud organizations since February 23, 2026, per What is new in Microsoft 365 Backup. In multi-geo tenants it backs up sites and user accounts in both the central and satellite locations, and backups honor the tenant’s geographic residency requirements.

What happens to Microsoft 365 backups when a user leaves?

When an account is removed from a policy, it keeps the last recovery window that applied to it and stays restorable until that window ends, per Microsoft Learn. Billing continues at the size recorded on removal. The Backup FAQ says one year instead. If the Entra ID user was deleted under 30 days ago, restore the user first.

Sources

1. Microsoft Learn, Overview of Microsoft 365 Backup. Accessed October 2026.
2. Microsoft Learn, Pricing model for Microsoft 365 Backup. Accessed October 2026.
3. Microsoft Learn, Microsoft 365 Backup FAQ. Accessed October 2026.
4. Microsoft Learn, Set up Microsoft 365 Backup. Accessed October 2026.
5. Microsoft Learn, View and edit Microsoft 365 Backup policies. Accessed October 2026.
6. Microsoft Learn, Shared responsibility in the cloud. Accessed October 2026.
7. Microsoft, Microsoft Services Agreement (effective September 30, 2026). Accessed October 2026.
8. Microsoft, Microsoft Services Agreement FAQ. Accessed October 2026.
9. Microsoft Learn, Recoverable Items folder in Exchange Online. Accessed October 2026.
10. Microsoft Learn, Default Retention Policy in Exchange Online. Accessed October 2026.
11. Microsoft Support, Restore items in the Recycle Bin of a SharePoint site. Accessed October 2026.
12. Microsoft Learn, Restore deleted sites. Accessed October 2026.
13. Microsoft Learn, Restore a user in the Microsoft 365 admin center. Accessed October 2026.
14. Microsoft Learn, OneDrive retention and deletion. Accessed October 2026.
15. Microsoft Support, Restore your OneDrive. Accessed October 2026.
16. Microsoft Learn, Version history limits for document libraries and OneDrive. Accessed October 2026.
17. Microsoft Learn, Place a mailbox on litigation hold. Accessed October 2026.
18. Microsoft Learn, Exchange Online Archiving service description. Accessed October 2026.
19. Microsoft Learn, How SharePoint and OneDrive interact with Microsoft Teams. Accessed October 2026.
20. Veeam, Veeam Data Cloud purchasing options. Accessed October 2026.
21. Microsoft Learn, What’s new in Microsoft 365 Backup. Accessed October 2026.
22. Microsoft Learn, Offboarding Microsoft 365 Backup. Accessed October 2026.
23. Microsoft Learn, Microsoft 365 Backup privacy, security and compliance. Accessed October 2026.
24. Microsoft Learn, Manage consumption and invoices for Microsoft 365 Backup. Accessed October 2026.
25. Microsoft Learn, Microsoft 365 Backup Storage overview. Accessed October 2026.
26. Microsoft Learn, Set up third-party billing for Microsoft 365 Backup Storage. Accessed October 2026.
27. Microsoft Learn, Microsoft 365 Backup Storage application lifecycle. Accessed October 2026.
28. Microsoft Adoption, Microsoft 365 Backup Storage partner solutions. Accessed October 2026.
29. Microsoft Learn, Set up pay-as-you-go billing in the Billing node. Accessed October 2026.
30. Microsoft Learn, Microsoft Entra built-in roles. Accessed October 2026.
31. Microsoft Learn, Workloads supported by GDAP. Accessed October 2026.
32. Microsoft Learn, Obtain granular admin permissions (GDAP). Accessed October 2026.
33. IDrive, Microsoft Office 365 Backup. Accessed October 2026.
34. CubeBackup, Pricing. Accessed October 2026.
35. Spin.ai, Pricing. Accessed October 2026.
36. Afi, Pricing. Accessed October 2026.
37. Synology, Active Backup for Microsoft 365. Accessed October 2026.