How to Back Up Office 365 Mailboxes, SharePoint and Teams

To back up Office 365 mailboxes, SharePoint and Teams properly, you need a backup that connects to your Microsoft 365 tenant, copies Exchange Online, OneDrive and SharePoint on a schedule, and keeps those copies under retention you control, with restores you have tested. Microsoft's recycle bins are time-limited and are not a backup plan.

Under Microsoft's shared responsibility model, the information and data you store in the cloud remain your responsibility. This guide explains what Microsoft gives you natively, where it stops, and how to plan Microsoft 365 backup that holds up on a bad day.

What Microsoft 365 recovers natively, and for how long

Microsoft's own documentation sets out the native recovery windows:

• Exchange Online mailboxes: permanently deleted items go to the Recoverable Items folder and are kept for 14 days by default. Administrators can extend this to a maximum of 30 days.
• SharePoint: deleted items are kept for up to 93 days from deletion, across the first- and second-stage recycle bins, unless the second-stage bin exceeds its quota or an administrator empties it.
• Departing users: when you delete a user, a deleted mailbox is recoverable for 30 days by default, and the user's OneDrive is kept for 30 days by default before moving to the site collection recycle bin for a further 93 days.

These windows suit accidental deletions noticed quickly. They help far less when a problem surfaces months later, an administrator account is compromised, or ransomware-encrypted files sync to OneDrive and SharePoint.

Where Teams data actually lives

Teams is often left out because it does not hold its data in one place. Microsoft explains that Teams messages are stored in an Azure-based chat service, with copies kept in hidden folders in Exchange mailboxes: the user's mailbox for chats and the group mailbox for standard channels. Files shared in a channel are stored in the team's SharePoint document library, and files shared in a private chat are stored in the sender's OneDrive.

So a Teams backup plan is really an Exchange, SharePoint and OneDrive plan. Check that your backup covers each of those locations, and confirm with your vendor exactly which Teams items it can restore.

SharePoint backup solutions and your options

There are three broad ways to back up Office 365 mailboxes, SharePoint and Teams:

1. Native retention only. Recycle bins plus Microsoft Purview retention policies. Useful for compliance, but retention policies keep or delete content; they are not a point-in-time restore tool.
2. Microsoft 365 Backup. Microsoft's own pay-as-you-go service backs up Exchange Online, OneDrive and SharePoint. Its backups stay inside the Microsoft 365 trust boundary, with policy retention options of up to two years.
3. An independent backup platform. Platforms such as Cohesity and NetBackup SaaS Protection connect to your Microsoft 365 tenant and keep copies under retention you control, often alongside the platform you already use for servers and databases.

What this means for GCC organisations

For banks, government-linked entities and regulated enterprises in the GCC, three questions usually decide the design:

• Separation. If a compromised global administrator can reach both production and backups, you have one point of failure. Many security teams want at least one copy under separate credentials or outside the tenant.
• Retention. Auditors and legal teams often ask for data from years ago, so match backup and archive retention to those periods. Backup is for recovery; archiving with Enterprise Vault for Microsoft 365 is for long-term retention and eDiscovery.
• Residency. Confirm where backup copies will be stored and whether that satisfies your internal policy and sector rules. This is general information, not legal advice.

Practical recommendations

1. List what you hold: mailboxes, shared mailboxes, OneDrive accounts, SharePoint sites and Teams, with owners.
2. Write down your native windows (14 days by default, up to 30, for mail; up to 93 days for SharePoint) and compare them with how long problems take to surface.
3. Choose your backup model and make sure it covers Exchange Online, OneDrive and SharePoint, so Teams content is protected too.
4. Protect backup administration with separate accounts and multi-factor authentication.
5. Test restores of a single email, a full mailbox, a SharePoint library and a Teams channel's files, and record how long each took.

If you are planning a mailbox migration at the same time, our article on giving your email archive a plan covers the archive side. Our Microsoft 365 backup service and wider data backup services in Dubai cover design, deployment and support.

FAQ

Does Microsoft back up Office 365 mailboxes?

Microsoft runs the service and offers time-limited recovery features such as Recoverable Items and recycle bins. Microsoft 365 Backup is a separate, pay-as-you-go service for Exchange Online, OneDrive and SharePoint. Either way, retention, separation and restore testing remain your decisions.

How do I back up Microsoft Teams?

Back up the places Teams stores its data: Exchange mailboxes, which hold copies of Teams messages (user mailboxes for chats, group mailboxes for channels), SharePoint for channel files, and OneDrive for files shared in chats.

How long can I recover deleted SharePoint files?

Natively, for up to 93 days from deletion, across the two recycle bins. After that, you need a backup to get them back.

Not sure your Microsoft 365 data could be restored after a bad week?

Talk to a Virtech backup engineer: call or WhatsApp Virgil on +971 55 700 8578, or email sales@virtech.ae.

Sources: Microsoft Learn: change deleted item retention · Microsoft Support: SharePoint recycle bin · Microsoft Learn: delete a user · Microsoft Learn: retention for Teams · Microsoft Learn: Teams with SharePoint and OneDrive · Microsoft Learn: Microsoft 365 Backup overview · Microsoft Learn: shared responsibility model