If your business uses Microsoft 365, how confident are you that you could get an important file back if it disappeared tomorrow?
Your email is working. Your team can open their files. Everything is in the cloud. It's easy to feel like that part of the business is taken care of, especially when you have plenty of other things competing for your attention.
But what happens when someone accidentally saves over the wrong spreadsheet, deletes a shared folder, or needs an email that has already been removed?
For those who aren't sure where to start, I wanted to break down the difference between Microsoft 365 backup and retention. Retention sets the rules for keeping or deleting information. Backup gives you a way to recover the data it protects. Both can help, and the details of your setup matter. Microsoft describes these separately in its retention guidance and backup overview.
By the end of this article, I want you to feel comfortable asking your IT provider what is covered, how you would get it back, and whether anyone has actually tested the process.
What does Microsoft 365 retention actually do?
Think of retention as the rules your business sets for how long information should stay around. Depending on the settings, Microsoft can keep content, delete it after a certain period, or keep it for a while and then delete it.
You might hear your IT provider refer to Microsoft Purview, retention policies, or retention labels. Those are the tools and settings behind these rules. Some retained information can be kept in places employees don't normally see, so keeping a copy doesn't necessarily mean someone can click a button and put a working folder back where it was. Microsoft explains those retention settings here.
That distinction matters when you're trying to get people back to work. You need to understand how someone would recover the information, as well as how long it is kept.
Where do file history and backups fit in?
Let's use a made-up example. Someone on your team opens a shared spreadsheet and realizes that yesterday's numbers have been replaced. Meanwhile, everyone else has spent the morning updating other documents in the same folder.
You want the old spreadsheet back, and you want to keep the work everyone else just finished.
OneDrive and SharePoint have version history, which may let you recover an earlier version of that file. Recycle bins can also help with deleted items while those items are still available. Your IT provider should check what's available in your setup first; for work accounts, the file versions available depend on the library's settings. Microsoft's version-history guide covers this.
A backup service gives your team another recovery option for the data included in that service. This is where I'd want to know which files, email accounts and shared sites are covered, how far back the backups go, and who can restore them.
The important part is knowing which option solves the problem without undoing someone else's work. Restoring one file and rolling an entire SharePoint site back to an earlier time are very different actions. The method also determines whether data goes back to its original location or somewhere else. Microsoft documents these restore options by service.
In our spreadsheet example, I'd want the team to agree on what is being restored and where it will go before anything changes. Afterward, someone who uses that spreadsheet should open it, check the numbers and confirm the right people can access it.
Doesn't Microsoft already offer backup?
Yes. Microsoft has a product called Microsoft 365 Backup for supported OneDrive accounts, SharePoint sites and Exchange Online mailboxes. Its backup settings include how far back you can recover data and which restore options are available. You can read Microsoft's product overview here.
The question to ask is whether that product or another backup service is actually set up for your business. Having a Microsoft 365 subscription doesn't tell you what your IT provider has enabled or which accounts are protected.
Ask for the name of the backup service, what it covers, who manages it and how it is billed. If you still see the term “Office 365 backup,” check that the advice applies to the product you're using today.
There's one more detail worth understanding: your retention rules and backup settings don't automatically match. With Microsoft's backup product, the backup policy controls its recovery window. Once information is restored into the live system, the applicable retention and deletion rules apply again. Your IT provider should check how those settings work together. Microsoft explains that relationship here.
Three questions I'd ask before there's a problem
You don't need to become a Microsoft administrator to have this conversation. Start with questions that relate to how your team actually works.
1. Are the things we rely on included?
Ask your provider to walk through the email accounts, shared files and sites your business uses. Include shared resources and anyone who recently joined the team. How do new employees get added to the backup plan, and is anything being left out?
“We have backups” is a starting point. A clear list of what's covered gives you something you can check.
2. Who do we call, and who can approve the restore?
Make sure you know who can recover the data, who in your business approves the change and who steps in if your usual contact is unavailable. That includes a plan for accessing the necessary admin account if there's a sign-in problem.
Keep those responsibilities written down somewhere your team can find them. Passwords and recovery codes belong in your approved secure storage, not on a general contact sheet.
3. Can we test it together?
This is the part I'd encourage you to make time for. Ask your provider to help recover a harmless test file in an approved test location. Agree on the steps first, so the exercise doesn't delete business records or overwrite current work.
Then check the result together. Does the file open? Is the information correct? Can the right people access it? How long did it take to get something usable back?
You learn much more from that conversation when you have an actual result to look at.
A simple worksheet for your next IT conversation
Open the printable Microsoft 365 restore worksheet to keep notes during your conversation.
I've put together this worksheet so you have a place to start. Use it with your IT provider and keep the completed notes in your business's own systems. You don't need to include passwords or private customer information.
| Question | What to write down |
|---|---|
| What are we testing? | The test file or email, where it lives and who uses it |
| What's protecting it? | The backup service or built-in recovery feature you're checking |
| How far back do we need to go? | The date or version you need, and whether it is available |
| Who is handling it? | The person doing the restore, who approves it and a backup contact |
| Where will it be restored? | The destination and how you'll preserve newer work |
| Did it work? | Whether it opens, has the expected contents and allows only the intended people access |
| How long did it take? | When you started and when the restored information was usable |
| What needs attention? | Any gaps, who's fixing them and when you'll check again |
A successful test gives you useful evidence for that particular situation. Larger problems or different accounts may take a different approach, so treat the result as something to build on rather than a guaranteed recovery time.
If you'd like to look beyond Microsoft 365 and plan for wider interruptions, our small-business continuity guide covers the people, applications and business tasks that need to keep moving.
How IT MGMT can help
What I want business owners to take away from this is that you should be able to understand your recovery plan. You should know what is protected, who to call and what happens next.
At IT MGMT, we help businesses with Microsoft 365 management and cloud backup. We're based in Airmont and work with businesses across Rockland, Bergen and our wider New York and New Jersey service area, with a focus on teams of 5–100 users.
We can help you talk through your current Microsoft plan, backup provider, the information your team relies on and how quickly you need it back. From there, we can agree on the right service, licensing, coverage and ongoing responsibilities for your business.
If you're unsure what your current setup includes, don't hesitate to reach out. Book a free Business IT consultation, and let's start with what you have in place today.
