Blog
Blog — SaaS backup, ransomware & recovery
Articles, guides and case notes on protecting SaaS data.
How to back up Google Workspace: every route, and what each misses
There are four ways to back up Google Workspace and only one is a backup. The documented windows, exclusions and restore limits of each, side by side.
OneDrive backup: why folder sync is not one
OneDrive gives you sync, a 93-day recycle bin and a 30-day rollback. None of them is a backup, and a licence condition can outrank your retention policy.
SaaS disaster recovery plan: the failures backup alone will not fix
Most SaaS disasters destroy access, not data — a vendor outage, a failed sign-on, a lapsed subscription. A SaaS disaster recovery plan has to cover all five hazards, not just the one a backup fixes.
Recover deleted Slack messages: what is actually possible
Can you recover deleted Slack messages? There is no trash — a retention setting decides in advance whether the content still exists. Here is what to check.
Ransomware disaster recovery plan for SaaS data
A ransomware disaster recovery plan for SaaS starts with RTO and RPO — but the platform, not you, sets your recovery point. Here is how to take it back.
Slack export: what a workspace export actually contains
Slack export explained: you get JSON messages and links to files, not the files, and no supported restore. See what each plan reaches and where the gaps are.
Does cloud backup protect against ransomware?
Does cloud backup protect against ransomware? Recycle bins and version history are a time-boxed undo, not a backup. See how far native recovery reaches.
Bitbucket backup: what a git clone does not save
Bitbucket backup explained: Atlassian's only documented recovery path is your own git clone, which restores commits and branches but no pull request history.
Confluence backup: what Atlassian Cloud actually keeps
Confluence backup explained: the page trash has no expiry, deleted spaces get 60 days, and the native export keeps one copy for 14 days. See what it misses.
Microsoft 365 backup: what is actually covered
Microsoft 365 backup comes in three layers: the native windows in your tenant, Microsoft’s own Backup add-on, and an independent copy. What each one covers.
Recover deleted Gmail and Drive files: the real windows
Gmail gives you 30 days in Trash plus 25 admin days. Drive uses the same two numbers, but the admin clock starts when the trash is emptied. How both really run.
Exchange Online mailbox recovery: what you can actually get back
Deleted mail, a purged item, a whole mailbox from a leaver. Here are the real Exchange Online recovery windows — 14 days, 30 days — and where they stop.
OneDrive recycle bin: how long you actually have to restore
The OneDrive and SharePoint recycle bin gives you 93 days from the original deletion, not from when the item reached the second bin. Here is what that covers.
Microsoft Teams backup: where your Teams data actually lives
Teams has no database of its own. Here's where Teams messages, chats and files really live, what the native 30-day and 93-day windows cover, and what they miss.
GDPR backup requirements: what the regulation asks of SaaS data
GDPR never says the word "backup" — yet Article 32 requires you to restore personal data in a timely manner, and to test that you can. Here's what that means.
Slack message & file retention: what's actually kept
Slack retention varies by plan and admin config — from a 90-day cap on Free to indefinite-until-configured on paid tiers. Here's what's actually kept, and what isn't.
Atlassian Cloud backup: what Jira and Confluence actually save (and don't)
Jira Cloud and Confluence Cloud give you a 60-day trash and a manual export button. Here's exactly what that covers, what it misses, and what closes the gap.
How to restore a deleted Google Workspace user
A deleted Google Workspace user is restorable for 20 days from the Admin console. Here is exactly what returns, what quietly does not, and what to have in place before day 21.
Microsoft 365 ransomware recovery: what actually gets your data back
Microsoft 365 keeps the service running — recovering your data after ransomware is on you. Here's what native retention covers, where it fails, and how a real restore works.
The SaaS shared responsibility model — why Microsoft, Google and Atlassian don't back up your data
The short answer: your SaaS vendor keeps the platform running. Keeping your data is your job. Here's what that actually means for M365, Google Workspace, Slack and Atlassian.
Google Workspace backup: does Google actually back up your data?
Google Workspace keeps trash for 30 days and gives admins 25 more — as an all-or-nothing date-range restore. That's retention, not backup. Here's the difference and how to close the gap.
NIS2 and SaaS backup: what the directive actually expects
NIS2 pushes backup and recovery from best practice to legal obligation for many EU organisations. Here's what that means for your SaaS data — and how to show you can recover.