The new reality
Your company's emails, files and conversations live in Microsoft 365. Backing them up is your responsibility, not Microsoft's.
Almost every company today works inside Microsoft 365, the suite that brings together email (Outlook), files (OneDrive and SharePoint) and conversations (Teams). And almost every company assumes Microsoft keeps a safety copy of all of it. It does not. Under the Shared Responsibility model, Microsoft keeps the platform running; protecting and recovering the content, your emails, files and conversations, is your company's responsibility.
Under the Shared Responsibility model, Microsoft handles the infrastructure and your company is responsible for protecting and recovering its own data. Source: Microsoft documentation.
The time Microsoft keeps a deleted item before erasing it for good usually sits between thirty and ninety days, depending on the data type.
Accidental deletion, a breached account and an employee leaving are the most common causes of data loss in Microsoft 365, and none is covered by Shared Responsibility.
If an employee deleted an entire mailbox today, or an attack locked your Microsoft 365, how quickly, and from which copy, would you recover?
Still evaluating? Take the free Microsoft 365 backup self-check.
The real problem
Being in Microsoft 365 is not the same as having a backup
Almost every company assumes that if a file is in OneDrive or SharePoint, it's protected. But syncing is not backing up: the cloud mirrors what happens instantly, including the mistake and the deletion. And under Microsoft's contract, recovering your content is your responsibility, not theirs. Here is how data disappears day to day:
By accident
A new hire drags an entire SharePoint library to the wrong place, or deletes a folder thinking it was a copy. The cloud replicates the mistake in the same second, on every computer.
On purpose
A departing, disgruntled or competitor-bribed employee wipes their own email and file history before leaving. Months of conversations and contracts vanish with them.
Ransomware
An infected attachment encrypts what is on the machine and everything it syncs to the cloud. What was “safe in OneDrive” is taken hostage along with it.
Hijacked account
Someone logs in with a user's password and, from the inside, deletes or locks the data as if they owned it.
The bin that empties
Microsoft 365's bin is not history: once that short window passes, the item is gone for good, and most losses are only noticed long after.
In none of these cases does Microsoft take responsibility for bringing the data back, that is the Shared Responsibility model. This is exactly the gap an independent backup closes: an isolated copy, beyond the reach of whoever deleted it, with years of history.
The concept
What independent Microsoft 365 backup is
It is a second copy of your Microsoft 365 data, kept beyond the reach of the account itself: Exchange emails, attachments and calendars, OneDrive files, SharePoint sites and permissions, and Teams channels, messages and files. That copy is captured several times a day, stored in an isolated and immutable way, and can be restored from a single email up to an entire mailbox, even if the original was deleted, changed or encrypted.
Recover anything
From a single email or file to a user's entire account, regardless of who deleted it or when.
Beyond the attack's reach
Copies stay isolated and immutable, so neither a ransomware attack (the virus that hijacks and scrambles your data to demand a ransom), nor an intruder, nor an insider can change or delete them.
Kept for as long as you need
Retention of up to 7 years, well beyond Microsoft's short window, ready for audit, client requirements and regulated sectors.
Not sure you already have this copy, or that it covers everything? The free self-check shows the gap in minutes.
What you get
What is included
A complete safety copy of your Microsoft 365, configured, monitored and tested end to end, with the restore already prepared for when you need it.
What is protected
The four pillars of Microsoft 365, with frequent copies throughout the day.
- Exchange: emails, attachments, mailboxes, folders, calendars and contacts.
- OneDrive: files, folders and versions for each user.
- SharePoint: documents, site structure and permissions.
- Teams: channels, conversations, files and team settings.
How you recover
Fast, surgical restore, without opening a ticket and waiting days.
- Granular restore: from a single email or file to the full account.
- Advanced search to find the right item across email, files and Teams.
- Recovery even after the employee's account has been deactivated.
- Restore to the original user or export the copy elsewhere.
- All in the same Zamak backup console, alongside server and workstation backups, if you also protect them with us.
- Recovery testing overseen by Zamak, so you know it works.
Tech specs
The engineering behind your peace of mind
For those who want to look under the hood: what underpins fast recovery and the security of the copy, in real numbers.
Encryption
AES-256 in transit and at rest, with the copy encrypted in your environment before it leaves, over a dedicated TLS 1.2 tunnel.
Frequency per workload
Exchange and Teams backed up up to six times a day; OneDrive and SharePoint, up to four times a day.
Granular restore
From a single email or file to the entire account, item by item, without restoring everything.
Incremental efficiency
Incremental technology that transmits, on average, less than 0.5% of the data per session, with variable-level deduplication and a continuous incremental model that does not resend everything on each copy.
Immutable and isolated
Copies stay isolated in an independent vault and cannot be altered or deleted, not even by a compromised administrator.
Retention and proof
Up to 7 years of retention with advanced search and export, and recovery tested automatically so you know the copy restores.
Your copy lives in a network of 30 datacenters, across 17 countries and five continents, on infrastructure certified in SOC 2 Type II, ISO 27001, ISO 9001, HIPAA and PCI-DSS, with data residency respected.
It is the difference between a backup you hope works and a backup you know works.
Take this documentation to present to decision-makers.
How it compares
Our Microsoft 365 backup, next to the alternatives
The backup solution Zamak delivers, Cove Data Protection by N-able, is compared by the manufacturer itself against the best-known alternatives on the market. See where it stands apart.
Microsoft 365, servers and workstations
Zamak's choice
Zamak (Cove Data Protection)
In one console and the same license
Veeam
Separate product and console
Datto
Separate products
Cloud storage
Zamak's choice
Zamak (Cove Data Protection)
Included, in 30 locations, no appliance
Veeam
You build and host it, at extra cost
Datto
Appliances that grow and fail; peak-usage billing
Data efficiency
Zamak's choice
Zamak (Cove Data Protection)
Up to 60× less data and 5× less storage
Veeam
Traditional, heavier transfer
Datto
Uses 5× more storage
Immutable copies (anti-ransomware)
Zamak's choice
Zamak (Cove Data Protection)
Automatic and included, no hardware
Veeam
Require dedicated hardware
Datto
Tied to the appliance architecture
Recovery testing
Zamak's choice
Zamak (Cove Data Protection)
Hosted, with automated verification
Veeam
Your own scripting or a separate license
Datto
Restore tied to the on-site appliance
Long-term retention
Zamak's choice
Zamak (Cove Data Protection)
7 years included, with no storage charge
Veeam
You manage long-term storage yourself
Datto
Archiving charged separately
Comparison published by N-able, maker of Cove Data Protection, against Veeam and Datto.
Risk and impact
From real risk to business impact
An employee accidentally deletes a critical email or folder.
Lost work and history, discovered far too late.
How independent backup responds
Granular restore of the exact item, from copies taken several times a day.
An employee leaves and their account is removed from the license.
Emails, contracts and company knowledge vanish with the account.
How independent backup responds
An independent copy that retains the data even after the account is deactivated.
An account is breached, or an insider deletes and encrypts data.
Client data and emails held hostage, with reputational damage, and Microsoft is not responsible for recovering it.
How independent backup responds
Isolated and immutable copies, beyond the attacker's reach, ready to restore.
An audit or regulation asks for emails and documents from years ago.
Microsoft's short retention has already erased for good what you need to present.
How independent backup responds
Long retention, with search and export, to find and hand over whatever is requested.
Microsoft's Shared Responsibility covers platform availability, not the recovery of your content. Source: Microsoft documentation.
For every role
What changes for each role in your company
The same protection, read through the eyes of whoever decides, owns the budget and runs the environment.
Owner and founder
Build it, protect it, grow its value.
Your clients' data and the history you built cannot become hostage to an attack or a wrong click. An independent copy protects that legacy and becomes proof of governance that helps win large accounts and sustain the company's value.
Manager and director
Predictable cost. No surprises.
Trade the unpredictable risk of downtime or a leak for a fixed, predictable line in the budget. You get confirmation that the copy exists and restores, so you can answer the board and the auditor without surprises.
IT lead and team
A secure extension of your team.
Zamak is a backline, not a replacement: your team gets back the hours that went into monitoring and recovery testing, with the confidence of knowing the copy is there and works, without losing the autonomy of whoever runs the environment.
IT partner and provider
Grow your book without growing your technical team.
Add Microsoft 365 backup to your offering without building the infrastructure. You keep the relationship and the contract; Zamak runs the technical backline and stands with you when something goes wrong at the client.
The care a license doesn't include
Why Zamak
Buying a backup license is the easy part. What truly brings peace of mind is the continuous care behind it: coverage tuned to your environment, every copy watched closely, recovery tested before you need it, and, on the day something goes wrong, the restore already at hand. That is the backline Zamak places alongside your team, adding to the work of whoever already runs your environment, never taking their place.
In the end, it is the difference between owning a backup license and having a backup that someone watches over, knows and can restore at the right moment.
15 years serving companies that cannot stop · Microsoft Solutions Partner · Addee (N-able) Elite Group · Great Place to Work.
The copy is stored on infrastructure certified in SOC 2 Type II, ISO 27001, HIPAA and PCI-DSS.
Still wondering?
Frequently asked questions
See also See the full continuity and backup solution · Take the free Microsoft 365 backup self-check
Next steps
Protect your company's Microsoft 365
Leave your details and a specialist from your country gets back during business hours to scope the coverage and get you started.
Get started now
Leave your details and a specialist from your country gets back to scope coverage and get you started.
Talk to a specialist
A conversation about your Microsoft 365 environment and what needs protection, with no commitment.
Check your gap
Find out in minutes what in your Microsoft 365 has no backup, for free.