Microsoft 365 backup retention in India: a Bengaluru SaaS Monday when the mailbox went missing

Last updated: 19 June 2026

Microsoft 365 backup retention is the quiet clock that decides whether a leaver mailbox is recoverable next quarter. Aarav messaged me on a Monday at 9:42 IST. The Sales Director had left the company in February. HR had closed the account in March. On Monday in June, Finance asked for a copy of one specific Q4 deal contract that the Sales Director had emailed back and forth from his @company mailbox. Aarav opened the M365 admin centre to restore the mailbox. The mailbox was no longer there. Not in Deleted Mailboxes, not in soft-delete, not anywhere. He typed one line to me. Bhai, the retention period was 93 days. Today is day 96. What are my options?

Short answer, written for him and then for the rest of you. There are no options. The mailbox is gone. The contract is gone. Microsoft will not pull it back from the salt mine. We can spend the next four hours phrasing the email to the CFO differently, but the email has to end the same way.

The longer answer is the one I want to walk through today, because Aarav is not a careless IT manager and his SaaS is not a careless company. They are 180 seats, Series B, M365 E3 all the way through, and they thought they had backup because they were on Microsoft. That is the actual gap. The native microsoft 365 backup retention window is short, default, and quietly running.

10:15 IST. What microsoft 365 backup retention actually buys you

Aarav came on a call. We pulled up the Microsoft docs page on managing deleted mailboxes in Exchange Online and read it together. The numbers are not buried. They are stated. They just do not register until a mailbox you needed is gone.

Here is the clock in plain English, for an E3 estate like Aarav’s.

So when Aarav’s HR team disabled and removed the Sales Director’s account in March, the soft-deleted mailbox sat for 30 days. After that, gone. Nobody set an inactive-mailbox litigation hold. Nobody briefed HR that a leaver’s mailbox needs IT sign-off before deletion. The 93 days Aarav quoted me was actually a rolling number across two policies. The actual hard-stop was day 30 after de-licensing in March. By June, day 96 was an entire quarter past Microsoft’s last copy.

Get my free M365 retention audit
200+ Indian businesses. Response within 8 hours.

11:30 IST. Three options on the table that are not really three.

I told Aarav we needed to think about two separate problems at once. The first was today’s lost mailbox. The second was preventing the next one. Today’s was triage. The next one was the policy fix.

For today, we tried three things in order.

One, we asked Microsoft Support to check if any retention hold had been applied retroactively that we missed. The answer came back at 12:50 IST. No hold. No recoverable copy. Closed ticket.

Two, we checked Outlook OST cache files on the Sales Director’s old laptop. The laptop had been reissued to a new joiner in April, freshly imaged. No OST. We checked the IT asset cupboard. The original hard disk had been securely wiped before reissue. The wipe was the right call under DPDP and the firm’s data hygiene policy. It was also the wrong call for recovering a contract three months later.

Three, we asked the customer who signed the contract whether they had their signed PDF copy on their side. They did. Eight hours of phone calls later, we had the contract. The CFO got her copy. The deal record was reconstructed. But the conversation Aarav and I were still going to have was about the policy gap that nearly cost the firm a Rs 18 lakh annual contract because the only copy of the proof had been deleted by Microsoft’s own default schedule.

14:00 IST. The licence-cost test.

I have seen this push-back fifty times. Third-party backup feels like an extra invoice on top of an M365 invoice that is already a quarter of the CFO IT spend. The honest answer changes nothing, but it lands differently. Here is the conversation as I have it most weeks.

This is the part where most IT heads I talk to push back. Third-party backup feels like an extra invoice on top of an M365 invoice that is already a quarter of the CFO’s IT spend. The push-back I hear most often is some version of, we are already paying Microsoft for storage, why pay again.

The honest answer is that the M365 licence does not include backup. It includes retention, which is a different product. Retention is what Microsoft uses for compliance and search inside a live tenant. Backup is what you use when the tenant deletes the thing you needed, or when someone exits and HR closes the account, or when a ransomware actor encrypts every OneDrive file on every laptop.

For a 180-seat SaaS like Aarav’s, the third-party M365 backup market in India hits these price points in mid-2026.

For 180 seats at the cheapest Veeam tier, the firm is looking at Rs 53,100 per year of backup spend. Roughly Rs 4,400 a month. The lost-deal exposure on the one mailbox Aarav lost was Rs 18 lakh. The CFO can do that math in her head before the second sentence of any pitch.

Worth a separate look: the Hyderabad SaaS that pulled an entire Teams channel back from AvePoint on a Tuesday and the Pune wealth firm that argued NetBackup vs Veeam during renewal week. Both are real Monday-shaped problems with real numbers.

Get my 180-seat M365 backup quote
200+ Indian businesses. Response within 8 hours.

17:20 IST. The email Aarav drafted to the CFO.

I sat with Aarav on the email to the CFO. He started with I am sorry. I asked him to rewrite. The email is not an apology, it is a brief. Three bullet points. What happened. What the policy gap was. What it costs to close the gap and what the cost of not closing it looks like. Send it as a one-pager attachment, not as a 600-word body. Finance reads attachments, not paragraphs.

The email went out at 17:48 IST. The CFO replied at 19:12 IST. Approve. Get the quote in tomorrow.

Aarav’s situation became a six-week project. M365 backup contract signed with Veeam routed through Veeam Backup for Microsoft 365, immutable storage on Wasabi Mumbai region, point-in-time recovery to the day, inactive-mailbox litigation hold policy rewritten with HR, leaver checklist updated to require IT sign-off before account deletion. Aarav still keeps a Slack reminder pinned that says day 30 is the real number, not day 93.

What this Monday actually teaches

Three things, written down so your IT head can paste them into a Friday review note.

First, Microsoft 365 retention is not Microsoft 365 backup. The licence holds your data for the legal minimums Microsoft has decided. After that, it is gone. The CERT-In incident reporting timeline assumes you have evidence to report. Without a third-party copy, you may not.

Second, leaver mailboxes are the most common loss. The deletion happens during a busy week, the person who knew is no longer there, the request to pull a contract comes months later. Day 30 quietly closes. Set inactive-mailbox holds at the policy level, not at the per-leaver level. HR cannot remember to do it for every exit.

Third, third-party M365 backup for a mid-size Indian firm sits between Rs 295 and Rs 540 per user per year. Even at the top end, the annualised cost of backup for an 180-seat firm is under Rs 1 lakh. The cost of a single recovered contract usually pays for the year.

Related ground: an email DLP cost breakdown from a Mumbai NBFC covers the leak-prevention side; the practical M365 migration guide covers the move that puts you on this clock in the first place; and the DPDP readiness checklist for HR and IT spells out where leaver mailbox controls sit inside the audit.

For the policy side of DPDP enforcement, the Ministry of Electronics and IT notifications remain the cleanest source on what a Significant Data Fiduciary actually has to keep.

P.S. Sudeep here. We shipped Veeam Backup for Microsoft 365 for a 240-seat Pune wealth firm in early June. The trigger was the same as Aarav’s, a leaver mailbox that quietly aged out before the auditor asked for it. Six weeks to live, eleven weeks to a settled policy. If you want a 45-minute scoping call on what your version of Aarav’s Monday looks like, reply on WhatsApp at +91 91375 93228 during 10 to 7 IST and we will take it from there.

Start my M365 backup conversation
200+ Indian businesses. Response within 8 hours.