Microsoft 365 Backup deep dive

Microsoft 365 Backup is Microsoft's first-party backup service for Exchange Online mailboxes, OneDrive for Business accounts, and SharePoint Online sites. Launched in 2024, it fills a gap that third-party SaaS-backup vendors had occupied for years: native Microsoft-hosted backup with rapid in-Microsoft restore at scale.

What Microsoft 365 Backup provides

• Backup of protected Exchange mailboxes, OneDrive accounts, and SharePoint sites.
• Hourly snapshots, retained based on configured retention (typically up to 1 year).
• In-place restore to a specific point in time — no need to migrate restored data anywhere.
• Rapid restore at scale — Microsoft's headline claim is hundreds of thousands of items per hour, dramatically faster than typical third-party restore.
• Granular restore — individual mailbox, OneDrive account, SharePoint site, or even specific items.
• Backup Storage — the underlying capacity, billed by GB-month of protected data.
• Native integration with the Microsoft 365 admin and Defender portals.

When you'd reach for Microsoft 365 Backup

Use cases the product is designed for:

• Ransomware recovery — rapidly rolling back a tenant's SharePoint or OneDrive content to before encryption.
• Mass deletion recovery — accidental deletion of an entire SharePoint site or many items.
• Account compromise recovery — restoring email and files an attacker has tampered with.
• Operational recovery — point-in-time restore beyond the standard recycle bin / preservation hold windows.

How it differs from third-party SaaS backup

Third-party backup providers (Veeam, Druva, AvePoint, Acronis, Barracuda, Spanning) have offered SaaS backup for Microsoft 365 for many years. They typically store data outside Microsoft's infrastructure, often in a cloud of the vendor's choice. This brings:

• Air-gapped storage — backup is on different infrastructure, so a tenant-wide Microsoft compromise doesn't reach the backup.
• Cross-tenant restore — restore to a different Microsoft 365 tenant (useful for M&A, tenant rebuilds).
• Longer retention — many vendors offer years or decades, beyond Microsoft 365 Backup's typical year.

Microsoft 365 Backup stays inside Microsoft infrastructure, which means:

• Faster restore because the data doesn't need to traverse a non-Microsoft network.
• Tighter integration with Microsoft tools and identity.
• Less air-gap protection — the backup is in the same logical Microsoft tenant scope.

Microsoft 365 Backup Storage API

Microsoft also publishes the Backup Storage API, which lets third-party backup vendors build on top of Microsoft 365 Backup. The vendor uses the API to manage protection sets and restore points in Microsoft's storage, while adding their own UI, cross-tenant restore, off-platform copies, and lifecycle features.

The likely future: a hybrid model where the fast in-Microsoft restore is provided by Microsoft 365 Backup, and air-gapped off-Microsoft copies are provided by partner vendors using the API.

Setup

Configuring Microsoft 365 Backup involves:

1. Subscribe to the Microsoft 365 Backup service (billed per GB of protected data per month).
2. Define protection policies — which mailboxes, OneDrives, and SharePoint sites to protect, with what retention.
3. Run baseline backup — initial full backup of protected data.
4. Configure restore permissions — who can request and approve restores.
5. Test restore quarterly — the only backup that matters is one you've validated.

What to do today

For new tenants thinking about backup, evaluate Microsoft 365 Backup alongside third-party options. The right answer for most organisations is both: Microsoft 365 Backup for fast in-platform recovery, plus a third-party off-platform option for ransomware and tenant-loss scenarios. Don't pick one without considering the other.