Microsoft 365 Backup: What It Really Costs to Protect Your Data

When Scottish businesses moved away from on-premises servers to Microsoft 365, many directors assumed their backup worries were solved for good. After all, Microsoft is a multi-trillion-pound global technology leader. It feels natural to assume that because your emails, spreadsheets, and client files sit inside Microsoft's cloud, they are permanently backed up and protected against every eventuality.

Unfortunately, this is one of the most common and costly misconceptions in modern business IT.

From Dundee and Angus to Perth, Fife, Edinburgh, and Glasgow, we regularly speak with business owners who are shocked to learn that Microsoft does not provide a comprehensive backup service as part of your standard monthly subscription.

In this guide, we break down why your Microsoft 365 data is not as safe as you might think, what a data loss event could cost your organisation, and the realistic budget you should set aside for proper third-party protection.

The Shared Responsibility Model: What Microsoft Does (and Doesn't) Do

To understand why your files may be at risk, you need to understand how cloud providers operate. Microsoft works under a framework known as the 'Shared Responsibility Model'.

In plain English, this means Microsoft takes responsibility for the infrastructure, while you remain entirely responsible for the data that sits on top of it.

Microsoft ensures that:

• The data centres remain online, powered, and physically secure.
• The hardware running Exchange, SharePoint, OneDrive, and Teams does not fail.
• The network infrastructure is resilient and available across the globe.

Microsoft does not ensure that:

• A user who accidentally deletes a shared SharePoint folder can restore it six months later.
• An unhappy employee who wipes their inbox before leaving cannot permanently destroy company records.
• A ransomware infection encrypting your OneDrive files can be rewound to a clean state from three weeks ago.
• Your organisation meets specific statutory retention periods required by UK law or industry regulators.

Microsoft provides basic availability and short-term recycle bins, but recycle bins are not backups. If a file sits in a recycle bin for longer than 30 to 93 days, depending on your configuration, it is permanently deleted. Once it is gone from Microsoft's systems, even their top engineers cannot retrieve it for you.

The True Costs of Data Loss

When calculating IT budgets, business owners often look purely at monthly licence fees. However, the correct way to assess backup costs is to compare the price of prevention against the true financial fallout of a data loss event.

Data loss rarely happens in a tidy, manageable way. When critical files disappear, the financial impact quickly multiplies across several areas:

### 1. Lost Billable Time and Productivity If five members of your team lose access to their project files or shared mailboxes for three working days, you are paying full salaries for zero productive output. For a firm with an average hourly staff cost of £30, five employees sitting idle for 24 working hours equals £3,600 in wasted wages alone, before factoring in lost revenue.

### 2. Manual Data Recreation Rebuilding lost spreadsheets, re-drafting contracts, and hunting through old email chains takes immense effort. If a senior manager or fee-earner spends 40 hours recreating work that was already completed, that is £2,000 to £4,000 in diverted time that should have been spent winning new business or serving clients.

### 3. Regulatory and Compliance Repercussions Under UK GDPR, businesses have an explicit legal duty to ensure the ongoing confidentiality, integrity, and availability of personal data. If you lose customer records or sensitive commercial files without a recoverable copy, you may be required to report the incident to the Information Commissioner's Office (ICO). The resulting investigations, legal advice, and potential administrative fines can quickly run into thousands of pounds.

### 4. Reputational Damage Explaining to a client in Glasgow or Edinburgh that you have lost their financial records, project drawings, or legal files causes immediate and lasting damage. In many cases, it leads directly to lost contracts and cancelled retainers.

When you add these factors together, even a moderate data loss incident frequently costs a small Scottish business between £5,000 and £25,000.

Ballpark Figures: What Does Third-Party Backup Actually Cost?

Dedicated Microsoft 365 cloud-to-cloud backup is surprisingly affordable. It operates silently in the background, taking multiple automated snapshots of your data every day and storing them in an independent, secure cloud repository outside of Microsoft's ecosystem.

Here are realistic, ballpark figures for budgeting purposes based on typical UK pricing in 2025.

### Per-User Monthly Pricing Most professional Microsoft 365 backup solutions are billed on a simple per-user, per-month model.

• Standard 365 Backup: Typically ranges from £2.50 to £4.50 per user, per month plus VAT.
• What this includes: Automated daily backups of Exchange Online (emails, calendars, contacts), OneDrive for Business, SharePoint sites, and Microsoft Teams chats and channels.
• Storage allowance: Leading solutions include unlimited or pooled cloud storage and unlimited retention, meaning you can retain backups for one year, seven years, or indefinitely without facing surprise storage overage fees.

### Setup and Onboarding Setting up cloud-to-cloud backup does not require installing bulky hardware or visiting individual workstations. Configuration is done securely at tenant level.

• Typical Setup Fee: £0 to £250 one-off, depending on the size of your organisation and whether you require custom retention policies or historical data migration.

Real-World Budget Scenarios

To see how this looks across different business sizes, consider these realistic annual figures:

• Small Office (10 Users):
• Monthly cost: ~£30 to £45
• Annual budget: £360 to £540 per year
• *Ideal for: Local professional services firms, independent estate agents, or consultancy practices in Angus or Perthshire.*

• Growing SME (25 Users):
• Monthly cost: ~£75 to £112.50
• Annual budget: £900 to £1,350 per year
• *Ideal for: Established manufacturing, construction, or distribution firms across Fife and Dundee.*

• Mid-Sized Firm (50 Users):
• Monthly cost: ~£150 to £225
• Annual budget: £1,800 to £2,700 per year
• *Ideal for: Regional law practices, accountancy groups, or multi-site businesses operating across the Central Belt.*

When set against the potential £10,000+ cost of an unrecoverable data disaster, dedicated 365 backup represents one of the highest-return, lowest-cost risk management investments any business can make.

What to Look For in a Microsoft 365 Backup Solution

Not all backup platforms are created equal. When reviewing options for your organisation, make sure your solution covers the following essentials:

• Full Coverage Across the Suite: Ensure it covers not just Outlook emails, but SharePoint document libraries, personal OneDrive folders, and Microsoft Teams conversations and file attachments.
• Multiple Daily Snapshots: Look for automated backups that run at least three to four times a day, minimising data loss between backup intervals.
• Granular, Point-in-Time Restore: You should be able to restore an entire mailbox, a single missing email, or an entire SharePoint folder structure exactly as it looked at 2:00 PM last Tuesday.
• Independent Cloud Storage: Backups must be stored on separate infrastructure, isolated from Microsoft Azure, so that an issue affecting Microsoft does not compromise your backup archives.
• UK Data Residency: Ensure backup repositories reside within UK data centres to maintain complete UK GDPR compliance.

The Orange Penguin Take

At Orange Penguin, we believe in keeping business technology straightforward and transparent. We have supported businesses across Scotland since 2007, and we have seen first-hand how easily a missing file, a corrupted folder, or an accidental deletion can disrupt an otherwise profitable week.

Relying on Microsoft's default retention tools as your primary disaster recovery plan is a gamble your business does not need to take. For a fraction of your monthly software expenditure, third-party backup gives you total data sovereignty, predictable budgeting, and genuine peace of mind.

Take the Next Step

If you are unsure whether your Microsoft 365 tenant is properly backed up, or if you would like an independent review of your current cybersecurity and cloud setup, we are here to help.

Book a free IT health check with our Dundee-based engineering team today. We will assess your existing Microsoft 365 configuration, identify potential security or backup gaps, and provide clear, plain-English recommendations with no obligation.