Microsoft 365 Backup for Small Businesses in Berlin: What Microsoft Protects vs. What You Must Back Up
Microsoft 365 Backup for Small Businesses in Berlin: What Microsoft Protects vs. What You Must Back Up
“We’re in Microsoft 365, so everything is backed up.” This assumption costs Berlin small businesses their data every year. Microsoft provides high availability and limited recoverability — not backup. The distinction matters when you need to recover.
What Microsoft Actually Provides
Microsoft 365 is designed for high availability, not backup. The platform replicates your data across multiple datacenters to ensure uptime. It is not designed to protect you from accidental deletion, malicious deletion, ransomware, or retention policy misconfiguration. Here is the specific recovery window for each service:
| Service | Recycle Bin / Soft Delete | Hard Delete Recovery | Ransomware Recovery |
|---|---|---|---|
| Exchange Online | 14 days (recoverable items) | 30 days with retention policy | Limited — encrypted emails not recoverable |
| SharePoint Online | 93 days (1st + 2nd stage) | Up to 30 days via file version history | 180-day restore window (limited) |
| OneDrive | 93 days | 30 days version history | 30-day Files Restore |
| Teams | Chat: 30 days; Files: via SharePoint | Chat messages: not recoverable after hard delete | Files via SharePoint only |
The critical gap: all of these windows assume the data was not permanently deleted or overwritten beyond the recovery window. A ransomware attack that encrypts all SharePoint files and waits 181 days before triggering the extortion demand is outside Microsoft’s restore window. A disgruntled employee who permanently deletes all project files on their last day — waited until after the 93-day window closed — is unrecoverable through Microsoft’s native tools.
Microsoft 365 Backup (the Native Product)
Microsoft has released a native Microsoft 365 Backup product (generally available as of 2024), which provides longer-term restore points for SharePoint, OneDrive, and Exchange. It is not the default — it must be purchased and configured separately, priced per user per month. For Berlin SMBs who prefer to stay within the Microsoft ecosystem, this is a viable option for coverage beyond the standard recoverability windows. It does not cover Teams chat messages or third-party app data stored in M365.
Azure Backup for On-Premises Data
For Berlin SMBs running on-premises Windows Server or file shares alongside Microsoft 365, Azure Backup provides cloud-based backup for on-premises workloads — VM backups, file and folder backups, and SQL Server databases. This covers the hybrid gap: data that lives on your office server rather than in M365. Azure Backup integrates with Microsoft 365 Business Premium licensing contexts and is priced per GB of protected data.
Backup Strategy Recommendation for Berlin SMBs
Layered Backup Architecture
- Microsoft 365 Backup (native): Enable for Exchange, SharePoint, OneDrive. Covers up to 1 year of restore points at a defined cost per user.
- Retention policies (Purview): Configure retention labels that prevent deletion of critical data for defined periods — legal holds, compliance requirements. This is not backup but prevents accidental permanent deletion.
- Azure Backup: For any remaining on-premises workloads — file servers, SQL databases, VMs.
- Periodic export: For highest-criticality data (client contracts, financial records), schedule regular exports to a separate, immutable storage location outside M365.
The GDPR Data Retention Angle
GDPR creates both a retention floor (data must be kept as long as it is needed for the specified purpose) and a retention ceiling (data must be deleted once the purpose expires, on data subject request, or at end of retention period). Backup strategy must align with both: you need to be able to recover data that must be retained, and you need to be able to demonstrate that data subject deletion requests are actually executed — including in backups. Native M365 retention policies with Purview give you searchable, auditable compliance controls that are difficult to replicate with third-party backup solutions.
IT Experts Berlin — M365 Backup and Retention Strategy
We assess your current M365 recoverability gaps, design a backup and retention policy aligned with your GDPR obligations, and configure Microsoft 365 Backup and Azure Backup for complete coverage. Book a consultation.