{"id":11221,"date":"2025-08-27T10:08:49","date_gmt":"2025-08-27T08:08:49","guid":{"rendered":"https:\/\/staging.netxconsult.de\/blog\/microsoft-365-backup-dsgvo-konform-und-sicher-in-der-cloud\/"},"modified":"2025-09-12T13:11:40","modified_gmt":"2025-09-12T11:11:40","slug":"microsoft-365-backup-dsgvo-compliant-and-secure-in-the-cloud","status":"publish","type":"post","link":"https:\/\/netxconsult.de\/en\/blog\/microsoft-365-backup-dsgvo-compliant-and-secure-in-the-cloud\/","title":{"rendered":"Microsoft 365 Backup \u2013 GDPR-Compliant and Safe in the Cloud"},"content":{"rendered":"

Imagine your company is targeted by hackers. Suddenly, the data in your Microsoft 365 Cloud is no longer secure. The big question then is: How do we get the place up and running again as quickly as possible? You might think, <\/span>“Oh, Microsoft has a backup function, let’s just load the backup.”<\/i> Not quite. What Microsoft offers as a ‘backup’ does not necessarily correspond to what we imagine it to be. <\/span><\/p>\n

Wie bei vielen Themen rund um die IT-Sicherheit, muss man sich VOR einem Sicherheitsvorfall auf den Ernstfall vorbereiten.
\nGenau dabei soll dieser Blog helfen: Wir geben Ihnen einen \u00dcberblick \u00fcber das, was Microsoft selbst anbietet und empfiehlt, und zeigen Ihnen dann unsere bew\u00e4hrten Methoden f\u00fcr Backups.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

What does Microsoft offer as an M365 backup?<\/h2><\/div>

Until now, Microsoft only offered a simple backup solution for OneDrive, which was mainly suitable for restoring accidentally deleted files. However, a comprehensive backup that fully backed up and quickly restored all areas such as SharePoint, communication channels or Microsoft Teams was missing. This meant that companies could not rely solely on the standard backup functions to ensure their operational capability in emergencies.<\/p>\n

However, Microsoft has been offering a fully-fledged backup service since 2024, thereby expanding its portfolio. Microsoft’s new backup offering may offer additional functions, but the late start also brings disadvantages. While Microsoft is just getting started, other providers have optimized their solutions over the years and made them more user-friendly. They offer sophisticated features and intuitive operation that companies appreciate.<\/p>\n<\/div><\/div><\/div>

\"The<\/span><\/div><\/div><\/div><\/div><\/div>

Microsoft first has to catch up here, which is reflected in the complexity and sometimes cumbersome handling of the new backup functions. This means for companies: While other solutions are already tried and tested and efficient, Microsoft’s offering could still face teething problems.<\/p>\n

Depending on the backup requirements and the size of the company, a third-party model that charges per user could be an attractive alternative, as Microsoft sets its prices per TB.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

The 3-2-1 method for backups<\/h2><\/div>

A proven standard in data backup is the 3-2-1 method. This strategy recommends creating three copies of your data, stored on at least two different media. One of these copies should also be in an external location – ideally geographically separated from the others to prevent data loss in the event of local incidents.<\/p>\n

Microsoft offers a highly developed infrastructure with strong geo-redundancy, which means that the probability of a complete system failure is low. These redundant systems make a significant contribution to data security. Nevertheless, a residual risk remains: a comprehensive cloud outage or a targeted attack could potentially affect all copies in the Microsoft ecosystem. Companies that focus on maximum security should therefore check whether additional backups outside of the Microsoft cloud make sense in order to fully comply with the 3-2-1 strategy.<\/p>\n<\/div><\/div><\/div>

\"The<\/span><\/div><\/div><\/div><\/div><\/div>

Who is responsible – External M365 backup a recommendation from Microsoft?<\/h2><\/div>

Microsoft 365 offers a certain level of protection and geo-redundancy for your data. However, there is often a misunderstanding about Microsoft’s responsibility and the user’s actual responsibility for the protection and long-term retention of their Office 365 data. It is important to understand that backup and recoverability protection from Microsoft is not the same as a comprehensive backup concept.<\/p>\n

Microsoft 365 geo-redundancy protects against site or hardware failures to ensure that your users can remain productive. However, it does not necessarily guarantee comprehensive protection and direct access to backups.<\/p>\n

It is crucial to assess control over your data and ensure that you have direct access and control over your backups. A backup is made by creating historical copies of your data and storing them in a different location. This allows you to restore it quickly in the event of data loss, accidental deletion or malicious attacks. Microsoft 365 does not provide sufficient protection against the latter in particular for most use cases.<\/p>\n

The responsibility clearly lies with the company and the users. In fact, Microsoft itself recommends that users back up their Microsoft 365 data. This underlines the importance of a comprehensive backup concept.<\/p>\n

The recommendation can be found in the Microsoft service contract<\/a>.<\/p>\n<\/div>

<\/span><\/div>

It is essential to understand the priorities of different companies. For Microsoft, for example, data backup is merely a complementary aspect of their service offering. On the other hand, for a company that focuses on backup solutions, the user-friendliness and functionality of their backup services are of paramount importance.<\/p>\n

But how exactly is my backup and how can I assure my business customers that I am GDPR-compliant? To have all compliance-relevant add-ons available at Microsoft level, you have to dig deep into your pockets. Backup providers based in Germany, on the other hand, offer their solutions with GDPR <\/span>Conformity .<\/span><\/p>\n<\/div><\/div><\/div><\/div><\/div>

More security and better backups<\/h2><\/div>

We have familiarized ourselves with some backup providers and have been able to identify a few aspects that can help you find the right product for you.<\/p>\n<\/div>

<\/i><\/i><\/span>Billing per TB or per user?<\/span><\/a><\/h4><\/div>
\n

Depending on your user behavior and organization size, it may be advantageous to charge either per TB or per active user. It is also important to read the small print here, as fair use <\/em>clauses are also hidden in per user solutions.<\/p>\n<\/div><\/div><\/div>

<\/i><\/i><\/span>Pure backup or all-round solution?<\/span><\/a><\/h4><\/div>
\n

Backups are an essential part of a comprehensive security concept. Other important aspects are email security, compliance and security awareness. We have often been able to significantly reduce the cost of backups by viewing them as an integral part of the overall security system and addressing several challenges simultaneously. Providers who offer all-round solutions and specialize in security products were able to score points not only for their clarity but also for their prices.<\/p>\n<\/div><\/div><\/div>

<\/i><\/i><\/span>Demonstrations<\/span><\/a><\/h4><\/div>
\n

To be able to see transparently how you can access your backup in an emergency, it is advisable to have an emergency demonstrated. So that you can act quickly and efficiently in an emergency.<\/p>\n<\/div><\/div><\/div>

<\/i><\/i><\/span>What is in my backup?<\/span><\/a><\/h4><\/div>
\n

To really be prepared for all situations, a cloud backup of your Microsoft Suite should include the following: Endpoints, Sharepoints, OneDrive, email inboxes, Planners and Teamschats. This means that not only your documents and data are safe, but also your communication channels<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>

Proof of concept presentation and free trial month<\/h2><\/div>

Get to know our backup and security solution for Microsoft 365! In a free initial consultation, we will introduce you to all the functions and then set up the solution individually for your company. You can test it for a month without obligation and then decide whether the solution meets your requirements. If not, you will not incur any costs. Arrange your free initial consultation now and make your data fully secure!<\/p>\n<\/div><\/div><\/div><\/div><\/div>

Buchen Sie jetzt eine
\nkostenlose Erstberatung!<\/h2><\/h2><\/div>
<\/i><\/span>Thank you for your request. It has been sent.<\/span><\/div>