Does Microsoft 365 back up my email and files?

Does Microsoft 365 back up my email and files? Not in the way most owners mean. A recycle bin that empties itself after a set time is not a backup, and Microsoft's own guidance says looking after your data is your job.

How it plays out

Your office manager left in March. In September, a client disputes a quote she sent them, and the email with the agreed price was in her mailbox. Her account was deleted when she left, to save the licence fee. The quote, and your side of the argument, went with it. Now it's your memory against the client's, on a job you've already done. With a backup outside the account, that quote is one request away.

What Microsoft does, and what it leaves to you

Its part: it keeps Outlook, OneDrive and Teams up and running, and it keeps your data available if one of its own computers fails. When you delete an email or a file, it goes to a deleted items folder or recycle bin first, and you can usually get it back from there.

Your part: that recovery window doesn't last forever. Microsoft's own help pages say the period is set by your account's administrator, and once it passes, items are permanently deleted. Microsoft's shared responsibility guidance says that whatever service you use, you are responsible for your data.

In practice, the gap shows up in four ways:

  • Something is deleted and nobody notices until months later, after the recovery window has closed.
  • Someone gets into the account and deletes mail to hide what they did. Anything that can be deleted with your password can be deleted by whoever has it.
  • A staff member leaves and their mailbox is removed with their licence.
  • Ransomware scrambles files on a laptop, and the scrambled copies sync up to OneDrive.

Do this today, member or not

  1. Find out what you'd do if a mailbox vanished. Ask whoever set up your Microsoft 365 how far back you could restore an email deleted six months ago.
  2. Don't delete a departing staff member's account straight away. Keep the mailbox, or export a copy, before anything is removed.
  3. Turn on multi-factor sign-in for every Microsoft 365 user. It makes it much harder for a thief to sign in and delete things. The government's guide walks you through it.
  4. Keep a backup outside the account. Backing up your information is one of the three things the Australian Cyber Security Centre tells small businesses to start with. The copy should be somewhere your Microsoft 365 password can't reach.

If you'd rather it was simply done

WISECLICK is a cybersecurity membership for Australian businesses of one to five people. Microsoft 365 backup comes with Cyber Plus and Cyber Max.

  • Email, OneDrive, SharePoint and Teams, backed up. Cyber Plus covers up to three people for $149 a month; Cyber Max covers up to five for $239 a month.
  • You never touch a backup console. If something needs to come back, you ask, and we do the restore for you.
  • The rest of the membership comes too. Security software on each computer and a phone, every alert sent to our team, files on your computers backed up every day and locked so nobody can delete or change them, with anything you delete recoverable for sixty days.

Cyber Core, at $59 a month, backs up the files on your computer but not the Microsoft 365 mailbox itself. AUD, GST included. Cancel any time.

See membership plans

Or start with your Cyber Report Card

Questions

Isn't the cloud already a backup?

It keeps your data available, which is different. A backup is a separate copy you can go back to after something has been deleted or changed.

Can't I just get things back from Deleted Items?

Often, if you notice quickly. Once the recovery period your account is set to has passed, items are gone for good.

Which WISECLICK plans include Microsoft 365 backup?

Cyber Plus (up to three people) and Cyber Max (up to five). Cyber Core does not include it.

Who's behind it

WISECLICK (wise.click) is a cybersecurity membership for Australian businesses of one to five people. WISECLICK Pty Ltd is a Sydney company at 56 Pitt Street, built by people who have run IT for Australian businesses since 2004.

Sources

Last reviewed 28 October 2026. The office manager's story is an illustration, not a member's case.

Related