Our simple per user pricing includes.
Why backup Microsoft 365 data.
Reduce user error & data security threats
Microsoft 365 provides powerful services within Office 365 – but a comprehensive backup of your 365 data is not one of them. Of over 1,000 IT Pros surveyed, 81% experienced data loss in Microsoft 365 – from simple user error to major data security threats.
You always have control and accessibility of your data
Infraworx Backup for Microsoft 365 eliminates the risk of losing access and control over your 365 data including Exchange Online, SharePoint Online, OneDrive for Business and Microsoft Teams – so that your data is always protected and accessible.
Reduce business critical vulnerabilities
Microsoft 365 enables your enterprise to work anywhere, anytime, without the need to host your own email, files and SharePoint infrastructure. Even though Microsoft hosts the infrastructure, this doesn’t replace your responsibility to backup business-critical Microsoft 365 data.
Affordable pricing, reliable service.
Frequently Asked Questions About Microsoft 365 Backup
Microsoft 365 Backup — What Australian Businesses Actually Need
The single most common — and most dangerous — assumption Australian businesses make is that Microsoft 365 backup is included with their Microsoft 365 subscription. It isn’t. Microsoft’s service agreement explicitly states data protection is the customer’s responsibility. The retention you get from Microsoft (30-93 days depending on workload) is a recycle bin, not a backup. It will not save you from ransomware, malicious deletion, an employee accidentally wiping a SharePoint site, or admin error after the retention window expires.
A proper Microsoft 365 backup service protects every workload your business runs in M365 — and restores any of it within hours, not days, regardless of cause.
What proper Microsoft 365 backup covers
Exchange Online (mail)
Mailboxes, including deleted items, calendar, contacts, public folders, archive mailboxes. Point-in-time recovery to any historical state. Critical for legal hold and matter discovery.
OneDrive for Business
Personal file storage including the leaver’s account (where 80% of business documents now live). Independent of Microsoft’s 30-day account-deletion retention.
SharePoint Online
Sites, document libraries, lists, version history, custom metadata, permissions. Restore individual files or full sites without going through Microsoft support.
Microsoft Teams
Channel chat history, channel files, meeting recordings, private messages, shared assets. Easily the workload most businesses have NO backup for and the hardest to recover without one.
Microsoft Entra ID (identity)
User accounts, groups, conditional access policies, app registrations. Recovery from compromised admin or accidental policy deletion.
Compliance + audit data
eDiscovery results, audit logs, sensitivity labels, retention policies. Your evidence base for legal, financial, and regulatory compliance.
Why Microsoft’s built-in retention is NOT a backup
Microsoft retains:
- Deleted email items: 14-30 days (depending on policy)
- Recoverable items in mailbox: 14 days default, can extend to 30
- OneDrive deleted files: 30 days from initial deletion, then 93 days in second-stage recycle bin
- SharePoint deleted items: 93 days total
- Teams chat: tied to underlying SharePoint storage
- User account deletion: 30-day soft delete window
After those windows expire, data is permanently lost. Worse — none of these protect against the case where the retention itself was tampered with: a compromised admin account, malicious insider, or ransomware that has escalated to admin level can disable retention, empty recycle bins, and cover its tracks. Without an independent backup, the data is gone.
The 3-2-1 rule applies to Microsoft 365. Three copies of your data, on two different storage types, with one offsite — and one of those copies must be immutable so even ransomware with admin credentials can’t destroy it. Without immutability, modern attacks will target the backup first.
What to look for in a Microsoft 365 backup provider
- Australian data residency — backup data hosted in Australian data centres, never crossing borders. Aligns with the Australian Privacy Principles and industry-specific obligations (legal, healthcare, financial services).
- Immutable storage option — at least one copy that cannot be deleted, encrypted, or modified by any user (including admins) for a configured retention period.
- Coverage across all M365 workloads — Exchange + OneDrive + SharePoint + Teams + Entra ID. A “mailbox-only” backup is not an M365 backup.
- Granular restore — single email, single file, single chat thread, single user. You shouldn’t have to restore an entire site to recover one document.
- Documented RTO and RPO — guaranteed recovery time and recovery point objectives. Anything beyond “we’ll get back to you” is unacceptable for production-grade backup.
- Regular automated restore testing — backup data that has never been restored is a hope, not a guarantee. Real backup services run continuous test restores.
- Cross-tenant migration support — for cases where you need to move data between Microsoft 365 tenants (mergers, acquisitions, divestitures, parent-company changes).
Microsoft 365 Backup — Frequently Asked Questions
Doesn’t Microsoft 365 already include backup?
No. Microsoft’s service agreement explicitly states data protection is the customer’s responsibility. What’s included is a recycle-bin retention (30-93 days depending on workload) — not backup. It will not protect against ransomware, malicious deletion, admin error, account compromise, or any data loss after the retention window expires.
How much does Microsoft 365 backup cost?
Pricing scales with the number of users and protected workloads. As a rough indication, full M365 backup including Exchange, OneDrive, SharePoint, Teams and Entra ID for a 25-50 person business runs in the low-to-mid hundreds per month. For specific quotes call 1300 277 211.
How fast can we restore a single deleted file?
For a single file from OneDrive or SharePoint, typical restore time is 5-15 minutes from the support request. For a full mailbox or full SharePoint site, allow 1-2 hours depending on size. Automated restore is available through self-service portal for end-users to recover their own files without admin intervention.
Where is the backup data physically stored?
For Australian customers we use Australian-hosted infrastructure (typically Sydney + Melbourne data centres). Backup data does not leave Australia. This satisfies Privacy Act requirements and industry-specific data sovereignty obligations including healthcare, legal, and financial services.
Does the backup include Microsoft Teams chat history?
Yes — channel chat, private 1:1 messages, group chat threads, files shared in chat, meeting recordings, and channel metadata. Teams is now where most real working communication happens for many Australian businesses, and most “M365 backup” services do NOT cover it properly. This is the workload we see most businesses regret having missed.
Can ransomware encrypt our Microsoft 365 backup?
Not if it’s configured correctly. We deploy with immutable storage — backup data physically cannot be deleted, encrypted, or modified during its retention period, even by an admin or attacker with full credentials. This is the single most important defence against modern ransomware that specifically targets backup infrastructure first.
What about Microsoft 365 Copilot data and AI-generated content?
Files Copilot creates or modifies are stored in OneDrive/SharePoint/Teams as normal Office documents and are backed up as part of those workloads. Conversation history with Copilot itself is held by Microsoft and not currently part of standard M365 backup scope — that’s a known gap and we monitor Microsoft’s roadmap on it.