[{"data":1,"prerenderedAt":402},["ShallowReactive",2],{"footer-services-en":3,"footer-local-en":28,"cmp-\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-backup-comparison":45,"cmp-alt-\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-backup-comparison":387,"cmp-others-\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-backup-comparison":389},[4,8,12,16,20,24],{"path":5,"navTitle":6,"order":7},"\u002Fen\u002Fservices\u002Fcybersecurity-audit","Cybersecurity Audit",1,{"path":9,"navTitle":10,"order":11},"\u002Fen\u002Fservices\u002Fpenetration-testing","Penetration Testing",2,{"path":13,"navTitle":14,"order":15},"\u002Fen\u002Fservices\u002Fmicrosoft-365-google-workspace-audit","Microsoft 365 \u002F Google Workspace Audit",3,{"path":17,"navTitle":18,"order":19},"\u002Fen\u002Fservices\u002Flaw-25-compliance","Law 25 Compliance",4,{"path":21,"navTitle":22,"order":23},"\u002Fen\u002Fservices\u002Fremediation-hardening","Remediation and Hardening",5,{"path":25,"navTitle":26,"order":27},"\u002Fen\u002Fservices\u002Fongoing-security-partner","Ongoing Security Partner (vCISO)",6,[29,33,37,41],{"path":30,"city":31,"translationKey":32},"\u002Fen\u002Fcybersecurity-audit\u002Fmontreal","Montréal","montreal",{"path":34,"city":35,"translationKey":36},"\u002Fen\u002Fcybersecurity-audit\u002Flaval","Laval","laval",{"path":38,"city":39,"translationKey":40},"\u002Fen\u002Fcybersecurity-audit\u002Fsouth-shore","South Shore","rive-sud",{"path":42,"city":43,"translationKey":44},"\u002Fen\u002Fcybersecurity-audit\u002Fnorth-shore","North Shore","rive-nord",{"id":46,"title":47,"body":48,"criteria":196,"date":255,"description":256,"extension":257,"faq":258,"keyword":271,"meta":272,"navigation":273,"options":274,"path":320,"rawbody":321,"seo":322,"sources":323,"stem":372,"translationKey":373,"updated":374,"verdict":375,"verified":385,"__hash__":386},"comparisons_en\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-backup-comparison.md","Microsoft 365 Backup Compared: Microsoft, Veeam and Keepit",{"type":49,"value":50,"toc":188},"minimark",[51,55,64,67,75,80,83,86,89,93,96,99,102,106,109,112,116,124,132,136,139,174,177,184],[52,53,54],"p",{},"It's Friday afternoon at a 25-person architecture firm in Montréal's Mile End. The office manager opens the shared projects folder and finds every drawing renamed and encrypted, OneDrive sync included. The recycle bin and version history help with a handful of files. For tens of thousands of documents, you need a real backup.",[52,56,57,58,63],{},"Microsoft protects its infrastructure, but restoring your data to a specific point in time is still your job. That's the shared responsibility model, and Microsoft says its position hasn't changed. We cover the basics in ",[59,60,62],"a",{"href":61},"\u002Fen\u002Fblog\u002Fmicrosoft-365-backup-do-you-need-it","Microsoft 365 backup: do you need it?",". Now that Microsoft sells its own backup tool, the question isn't just \"should we back up?\" but \"with what?\"",[52,65,66],{},"This comparison puts the native tool, Microsoft 365 Backup, up against two established cloud services: Veeam Data Cloud for Microsoft 365 and Keepit.",[68,69,72],"callout",{"title":70,"type":71},"Our method","info",[52,73,74],{},"We focused on what matters to a Canadian SMB: a copy outside Microsoft, data location, coverage (Teams, Entra ID, Google Workspace), retention, immutability, restore options and pricing model. Every value comes from the vendors' official documentation, reviewed in October 2026. Prices change, so confirm them before you buy. This comparison is not sponsored.",[76,77,79],"h2",{"id":78},"microsoft-365-backup-speed-without-leaving-microsoft","Microsoft 365 Backup: speed, without leaving Microsoft",[52,81,82],{},"You turn it on from the Microsoft 365 admin centre and pay as you go through an Azure subscription. The list price is US$0.15 per GB of protected content per month, and restores are free. Read the fine print on what counts: Microsoft also bills for the second-stage recycle bin, deleted and versioned mailbox items it retains, and online archives.",[52,84,85],{},"The strengths are real. Restore points are created every 10 minutes (for the past two weeks on OneDrive and SharePoint, then weekly up to 52 weeks; for 52 weeks on Exchange), and Microsoft advertises fast bulk restores, which is exactly what you want after ransomware. You can now restore specific files and folders, and search for individual mailbox items.",[52,87,88],{},"The limits are just as clear. Coverage is Exchange (user and shared mailboxes, not group or room mailboxes), OneDrive and SharePoint. Retention maxes out at two years. Most importantly, Microsoft says the data never leaves the Microsoft 365 trust boundary. That's why it's fast, but it isn't a copy held by someone else.",[76,90,92],{"id":91},"veeam-data-cloud-for-microsoft-365-two-copies-if-you-want-them","Veeam Data Cloud for Microsoft 365: two copies if you want them",[52,94,95],{},"Veeam offers this as a managed service: no servers to deploy, with unlimited storage and 24\u002F7 support in every plan. Foundation is listed at US$3.50 per user per month for 10 to 50 users; Advanced adds Entra ID protection, and Premium adds fast, large-scale recovery.",[52,97,98],{},"The architecture is the main draw. \"Flex\" backups are stored in a Veeam-hosted Azure environment, isolated from Microsoft 365 and from your own systems, in the region you choose, including Canada Central. The Premium plan also lets you run \"Express\" backups on Microsoft 365 Backup storage. The result is an external copy and a fast-restore copy, managed from one console.",[52,100,101],{},"On the downside, Google Workspace isn't listed among the workloads Veeam Data Cloud protects, the prices are US-dollar MSRP that resellers may adjust, and the documentation we reviewed covers Teams channels rather than private chats.",[76,103,105],{"id":104},"keepit-independent-infrastructure-in-canada","Keepit: independent infrastructure, in Canada",[52,107,108],{},"Keepit runs its own storage infrastructure instead of reselling a hyperscaler's. It opened two Canadian data centres in 2022 and states that customer data never leaves the chosen region. It keeps four copies across at least two sites per region; its data centres are ISO 27001 certified and its controls are covered by a SOC 2 Type II report.",[52,110,111],{},"The service covers Exchange, OneDrive, SharePoint, groups and teams, and a separate Keepit service protects Google Workspace, which is handy if your organization runs both. Retention is 5 years on the entry plan and 10 years on the higher tiers, with an unlimited add-on. The trade-offs: no published pricing, Entra ID requires a separate service, and entry-plan support runs during business hours.",[76,113,115],{"id":114},"one-copy-or-two","One copy or two?",[52,117,118,119,123],{},"The ",[59,120,122],{"href":121},"\u002Fen\u002Fblog\u002F3-2-1-1-0-backup-rule-ransomware","3-2-1-1-0 backup rule"," calls for at least one off-site copy and one immutable or offline copy. Microsoft 365 Backup ticks the immutability box with a caveat: storage is append-only, but an administrator can still delete backups by offboarding the service, with a 90-day grace period.",[52,125,126,127,131],{},"In a ",[59,128,130],{"href":129},"\u002Fen\u002Fblog\u002Fransomware-small-business-attack-anatomy","ransomware attack",", a stolen admin account is exactly what attackers go after. Microsoft itself flags deleting backups and pausing billing as \"potentially harmful\" events that trigger email alerts. Turn those alerts on, whichever tool you choose.",[76,133,135],{"id":134},"how-to-choose","How to choose",[52,137,138],{},"Start with these questions:",[140,141,142,150,156,162,168],"ul",{},[143,144,145,149],"li",{},[146,147,148],"strong",{},"Does your insurer or a key client require a copy outside Microsoft?"," If so, the native tool won't do it alone; Veeam or Keepit fill that gap.",[143,151,152,155],{},[146,153,154],{},"Do you also use Google Workspace?"," Of these three, only Keepit covers both.",[143,157,158,161],{},[146,159,160],{},"How long must you keep records?"," Two years at most with Microsoft; longer with Veeam Flex or Keepit.",[143,163,164,167],{},[146,165,166],{},"Where must your data live?"," A \"Canada\" region isn't necessarily in your province. If backups hold personal information, check with your privacy officer and legal counsel.",[143,169,170,173],{},[146,171,172],{},"Should cost follow headcount or data volume?"," A 10-person firm with heavy drawings and photos will pay very differently under each model.",[52,175,176],{},"Whatever you pick, run a real test restore at least once a quarter. A backup you've never restored is just a theory.",[52,178,179,180,183],{},"Our ",[59,181,182],{"href":13},"Microsoft 365 and Google Workspace audit"," checks what your backups actually cover, who can delete them and which alerts are in place.",[185,186],"cta",{"variant":187},"devis",{"title":189,"searchDepth":11,"depth":15,"links":190},"",[191,192,193,194,195],{"id":78,"depth":11,"text":79},{"id":91,"depth":11,"text":92},{"id":104,"depth":11,"text":105},{"id":114,"depth":11,"text":115},{"id":134,"depth":11,"text":135},[197,203,209,215,220,226,231,237,243,249],{"label":198,"values":199},"Pricing model",[200,201,202],"Consumption-based, per protected GB","Per user, annual or monthly subscription","Per user, all-inclusive, quote only",{"label":204,"values":205},"Copy outside Microsoft 365",[206,207,208],"No: stays inside the Microsoft 365 trust boundary","Yes (Flex, in Veeam-managed Azure); Express stays in Microsoft 365","Yes, Keepit's independent infrastructure",{"label":210,"values":211},"Storage in Canada",[212,213,214],"Follows your Microsoft 365 data location","Yes, Azure Canada Central region (Flex)","Yes, Canada region (two data centres)",{"label":216,"values":217},"Microsoft Teams",[218,219,219],"No for messages; files via SharePoint","Teams, channels and posts",{"label":221,"values":222},"Entra ID",[223,224,225],"No","Yes (Advanced and Premium plans)","Separate service",{"label":227,"values":228},"Google Workspace",[223,229,230],"Not listed","Yes (separate service)",{"label":232,"values":233},"Retention",[234,235,236],"3 months, 6 months, 1 year or 2 years","Flex: 1 year by default, up to unlimited; Express: 52 weeks","5 or 10 years depending on plan; unlimited add-on",{"label":238,"values":239},"Immutability",[240,241,242],"Append-only storage; an admin can still delete backups","Yes, service-level (Flex and Express)","Yes, immutable backups",{"label":244,"values":245},"Granular restore",[246,247,248],"Files, folders and mailbox items","Yes, Microsoft 365 items","Yes, single items or full datasets",{"label":250,"values":251},"Security attestations",[252,253,254],"Not specified for Backup; Exchange, OneDrive and SharePoint: ISO 27001","ISO\u002FIEC 27001; SOC 2 Type 2 (scope not specified)","ISO\u002FIEC 27001 (Keepit and its data centres); SOC 2 Type II","2026-10-24","Microsoft 365 Backup, Veeam Data Cloud or Keepit? Compare off-Microsoft copies, Canadian storage, Teams coverage, retention and verified pricing for SMBs.","md",[259,262,265,268],{"q":260,"a":261},"Is Microsoft 365 Backup enough to follow the 3-2-1 rule?","Not on its own. Microsoft states that backups never leave the Microsoft 365 data trust boundary. That's what makes restores fast, but the copies stay with the same provider and are managed from the same console. For a truly separate copy, add a third-party service that stores data on different infrastructure, or combine both approaches.",{"q":263,"a":264},"How much does Microsoft 365 backup cost for a 25-person business?","With Microsoft 365 Backup, it depends on how much data you protect: at US$0.15 per GB per month, 500 GB of protected content comes to about US$75 a month. With Veeam Data Cloud's Foundation plan, 25 users at US$3.50 come to US$87.50 a month, billed annually. Keepit is quote only. These are October 2026 list prices and resellers may charge differently.",{"q":266,"a":267},"Can my Microsoft 365 backups stay in Canada?","Yes, with all three options, as long as they're configured correctly. Microsoft 365 Backup follows your Microsoft 365 data location, Veeam lets you pick the Azure Canada Central region for Flex backups, and Keepit offers a Canada region. Note that 'in Canada' doesn't mean 'in Quebec': if you operate in Quebec, Law 25 requires a privacy impact assessment before entrusting personal information to someone outside the province. Check with your legal counsel.",{"q":269,"a":270},"Are Teams chats backed up?","Microsoft 365 Backup doesn't cover Teams messages; it protects Exchange, OneDrive and SharePoint, which is where team files live. Veeam and Keepit back up teams, channels and their posts. The official pages we reviewed don't mention private or group chats, so ask before you sign if those conversations matter to you.","Microsoft 365 backup comparison",{},true,[275,290,305],{"name":276,"url":277,"tagline":278,"pricing":279,"bestFor":280,"pros":281,"cons":286},"Microsoft 365 Backup","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-overview","Microsoft's native backup tool, built into the Microsoft 365 admin centre.","US$0.15 per protected GB per month, pay-as-you-go through an Azure subscription; restores are free (per the official site, October 2026)","SMBs fully on Microsoft 365 that want very fast recovery after ransomware or a mass deletion.",[282,283,284,285],"No new vendor: switched on from the admin centre","10-minute restore points and fast bulk restores","Restores individual files, folders and mailbox items","Honours your Microsoft 365 data residency",[287,288,289],"Backups never leave the Microsoft 365 environment","No Teams messages, Entra ID or Google Workspace","Cost grows with data volume; retention tops out at 2 years",{"name":291,"url":292,"tagline":293,"pricing":294,"bestFor":295,"pros":296,"cons":301},"Veeam Data Cloud for Microsoft 365","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fsaas\u002Fbackup-microsoft-office-365.html","Veeam-managed backup service hosted in Azure, with an optional fast-restore tier on Microsoft's own backup storage.","Foundation: US$3.50 per user per month (10 to 50 users), billed annually; Premium: US$7.00; unlimited storage included (MSRP, per the official site, October 2026)","SMBs that want a copy outside Microsoft 365, stored in Canada, at a predictable per-user price.",[297,298,299,300],"Copy isolated from Microsoft 365, in the Azure region you choose (including Canada Central)","Unlimited storage and 24\u002F7 support included","Premium plan pairs a Veeam copy with fast restores on Microsoft storage","Entra ID included in the Advanced and Premium plans",[302,303,304],"Google Workspace isn't on the list of protected workloads","Prices published in US dollars and vary by reseller","Private Teams chats not mentioned in the documentation we reviewed",{"name":306,"url":307,"tagline":308,"pricing":309,"bestFor":310,"pros":311,"cons":316},"Keepit","https:\u002F\u002Fwww.keepit.com\u002Fservices\u002Fbackup-microsoft-365\u002F","SaaS backup on infrastructure independent of the big public clouds, with a Canadian storage region.","Quote only, all-inclusive per-user pricing (per the official site, October 2026)","Organizations that need infrastructure separate from Microsoft, long retention or Google Workspace coverage.",[312,313,314,315],"Keepit runs its own storage infrastructure, separate from Microsoft","Canada region; data never leaves the region you pick","5- or 10-year retention depending on plan, unlimited as an add-on","Also protects Google Workspace (separate service)",[317,318,319],"No public pricing","Entra ID is a separate service","Entry plan support is limited to business hours","\u002Fen\u002Fcomparisons\u002Fmicrosoft-365-backup-comparison","---\ntitle: \"Microsoft 365 Backup Compared: Microsoft, Veeam and Keepit\"\ndescription: \"Microsoft 365 Backup, Veeam Data Cloud or Keepit? Compare off-Microsoft copies, Canadian storage, Teams coverage, retention and verified pricing for SMBs.\"\ndate: 2026-10-24\nverified: \"October 2026\"\ntranslationKey: sauvegarde-m365-outils\nkeyword: \"Microsoft 365 backup comparison\"\noptions:\n  - name: \"Microsoft 365 Backup\"\n    url: \"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-overview\"\n    tagline: \"Microsoft's native backup tool, built into the Microsoft 365 admin centre.\"\n    pricing: \"US$0.15 per protected GB per month, pay-as-you-go through an Azure subscription; restores are free (per the official site, October 2026)\"\n    bestFor: \"SMBs fully on Microsoft 365 that want very fast recovery after ransomware or a mass deletion.\"\n    pros: [\"No new vendor: switched on from the admin centre\", \"10-minute restore points and fast bulk restores\", \"Restores individual files, folders and mailbox items\", \"Honours your Microsoft 365 data residency\"]\n    cons: [\"Backups never leave the Microsoft 365 environment\", \"No Teams messages, Entra ID or Google Workspace\", \"Cost grows with data volume; retention tops out at 2 years\"]\n  - name: \"Veeam Data Cloud for Microsoft 365\"\n    url: \"https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fsaas\u002Fbackup-microsoft-office-365.html\"\n    tagline: \"Veeam-managed backup service hosted in Azure, with an optional fast-restore tier on Microsoft's own backup storage.\"\n    pricing: \"Foundation: US$3.50 per user per month (10 to 50 users), billed annually; Premium: US$7.00; unlimited storage included (MSRP, per the official site, October 2026)\"\n    bestFor: \"SMBs that want a copy outside Microsoft 365, stored in Canada, at a predictable per-user price.\"\n    pros: [\"Copy isolated from Microsoft 365, in the Azure region you choose (including Canada Central)\", \"Unlimited storage and 24\u002F7 support included\", \"Premium plan pairs a Veeam copy with fast restores on Microsoft storage\", \"Entra ID included in the Advanced and Premium plans\"]\n    cons: [\"Google Workspace isn't on the list of protected workloads\", \"Prices published in US dollars and vary by reseller\", \"Private Teams chats not mentioned in the documentation we reviewed\"]\n  - name: \"Keepit\"\n    url: \"https:\u002F\u002Fwww.keepit.com\u002Fservices\u002Fbackup-microsoft-365\u002F\"\n    tagline: \"SaaS backup on infrastructure independent of the big public clouds, with a Canadian storage region.\"\n    pricing: \"Quote only, all-inclusive per-user pricing (per the official site, October 2026)\"\n    bestFor: \"Organizations that need infrastructure separate from Microsoft, long retention or Google Workspace coverage.\"\n    pros: [\"Keepit runs its own storage infrastructure, separate from Microsoft\", \"Canada region; data never leaves the region you pick\", \"5- or 10-year retention depending on plan, unlimited as an add-on\", \"Also protects Google Workspace (separate service)\"]\n    cons: [\"No public pricing\", \"Entra ID is a separate service\", \"Entry plan support is limited to business hours\"]\ncriteria:\n  - label: \"Pricing model\"\n    values: [\"Consumption-based, per protected GB\", \"Per user, annual or monthly subscription\", \"Per user, all-inclusive, quote only\"]\n  - label: \"Copy outside Microsoft 365\"\n    values: [\"No: stays inside the Microsoft 365 trust boundary\", \"Yes (Flex, in Veeam-managed Azure); Express stays in Microsoft 365\", \"Yes, Keepit's independent infrastructure\"]\n  - label: \"Storage in Canada\"\n    values: [\"Follows your Microsoft 365 data location\", \"Yes, Azure Canada Central region (Flex)\", \"Yes, Canada region (two data centres)\"]\n  - label: \"Microsoft Teams\"\n    values: [\"No for messages; files via SharePoint\", \"Teams, channels and posts\", \"Teams, channels and posts\"]\n  - label: \"Entra ID\"\n    values: [\"No\", \"Yes (Advanced and Premium plans)\", \"Separate service\"]\n  - label: \"Google Workspace\"\n    values: [\"No\", \"Not listed\", \"Yes (separate service)\"]\n  - label: \"Retention\"\n    values: [\"3 months, 6 months, 1 year or 2 years\", \"Flex: 1 year by default, up to unlimited; Express: 52 weeks\", \"5 or 10 years depending on plan; unlimited add-on\"]\n  - label: \"Immutability\"\n    values: [\"Append-only storage; an admin can still delete backups\", \"Yes, service-level (Flex and Express)\", \"Yes, immutable backups\"]\n  - label: \"Granular restore\"\n    values: [\"Files, folders and mailbox items\", \"Yes, Microsoft 365 items\", \"Yes, single items or full datasets\"]\n  - label: \"Security attestations\"\n    values: [\"Not specified for Backup; Exchange, OneDrive and SharePoint: ISO 27001\", \"ISO\u002FIEC 27001; SOC 2 Type 2 (scope not specified)\", \"ISO\u002FIEC 27001 (Keepit and its data centres); SOC 2 Type II\"]\nverdict:\n  - profile: \"15-person office in Kingston, fully on Microsoft 365, with no external-copy requirement\"\n    pick: \"Microsoft 365 Backup\"\n    why: \"A few clicks to turn on, fast bulk recovery after ransomware and a bill that tracks the data you protect. Plan for an external copy if requirements change.\"\n  - profile: \"40-employee engineering firm in Ottawa whose insurer asks for a backup outside Microsoft 365\"\n    pick: \"Veeam Data Cloud for Microsoft 365\"\n    why: \"Published per-user pricing, unlimited storage and a Canada Central storage option. The Premium plan adds fast restores on Microsoft's backup storage.\"\n  - profile: \"Montréal accounting firm running both Microsoft 365 and Google Workspace, with long record-keeping obligations\"\n    pick: \"Keepit\"\n    why: \"One vendor protects both environments (Google Workspace through a separate service), with a Canadian region and 5- to 10-year retention, extendable as an add-on.\"\nfaq:\n  - q: \"Is Microsoft 365 Backup enough to follow the 3-2-1 rule?\"\n    a: \"Not on its own. Microsoft states that backups never leave the Microsoft 365 data trust boundary. That's what makes restores fast, but the copies stay with the same provider and are managed from the same console. For a truly separate copy, add a third-party service that stores data on different infrastructure, or combine both approaches.\"\n  - q: \"How much does Microsoft 365 backup cost for a 25-person business?\"\n    a: \"With Microsoft 365 Backup, it depends on how much data you protect: at US$0.15 per GB per month, 500 GB of protected content comes to about US$75 a month. With Veeam Data Cloud's Foundation plan, 25 users at US$3.50 come to US$87.50 a month, billed annually. Keepit is quote only. These are October 2026 list prices and resellers may charge differently.\"\n  - q: \"Can my Microsoft 365 backups stay in Canada?\"\n    a: \"Yes, with all three options, as long as they're configured correctly. Microsoft 365 Backup follows your Microsoft 365 data location, Veeam lets you pick the Azure Canada Central region for Flex backups, and Keepit offers a Canada region. Note that 'in Canada' doesn't mean 'in Quebec': if you operate in Quebec, Law 25 requires a privacy impact assessment before entrusting personal information to someone outside the province. Check with your legal counsel.\"\n  - q: \"Are Teams chats backed up?\"\n    a: \"Microsoft 365 Backup doesn't cover Teams messages; it protects Exchange, OneDrive and SharePoint, which is where team files live. Veeam and Keepit back up teams, channels and their posts. The official pages we reviewed don't mention private or group chats, so ask before you sign if those conversations matter to you.\"\nsources:\n  - title: \"Microsoft Learn: Overview of Microsoft 365 Backup\"\n    url: \"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-overview\"\n  - title: \"Microsoft Learn: Pricing model for Microsoft 365 Backup\"\n    url: \"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-pricing\"\n  - title: \"Microsoft Learn: Restore data in Microsoft 365 Backup\"\n    url: \"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-restore-data\"\n  - title: \"Microsoft Learn: Set up Microsoft 365 Backup\"\n    url: \"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-setup\"\n  - title: \"Microsoft Learn: Microsoft 365 Backup FAQ\"\n    url: \"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-faq\"\n  - title: \"Microsoft Learn: ISO\u002FIEC 27001 in-scope Microsoft services\"\n    url: \"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fcompliance\u002Fregulatory\u002Foffering-iso-27001\"\n  - title: \"Veeam: Veeam Data Cloud for Microsoft 365\"\n    url: \"https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fsaas\u002Fbackup-microsoft-office-365.html\"\n  - title: \"Veeam: Veeam Data Cloud pricing and purchasing options\"\n    url: \"https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-cloud\u002Fpurchasing-options.html\"\n  - title: \"Veeam Help Center: Microsoft 365 backup storage regions\"\n    url: \"https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fm365_region_availability.html\"\n  - title: \"Veeam Help Center: Backup object types\"\n    url: \"https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fm365_backup_object_types.html\"\n  - title: \"Veeam Help Center: Veeam Data Cloud for Microsoft 365 security\"\n    url: \"https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fm365_security.html\"\n  - title: \"Veeam Help Center: Workloads protected by Veeam Data Cloud\"\n    url: \"https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fwelcome.html\"\n  - title: \"Veeam Trust Center\"\n    url: \"https:\u002F\u002Fwww.veeam.com\u002Fcompany\u002Ftrust-center.html\"\n  - title: \"Keepit: Backup and recovery for Microsoft 365\"\n    url: \"https:\u002F\u002Fwww.keepit.com\u002Fservices\u002Fbackup-microsoft-365\u002F\"\n  - title: \"Keepit: Plans and pricing\"\n    url: \"https:\u002F\u002Fwww.keepit.com\u002Fpricing\u002F\"\n  - title: \"Keepit: Data centre security\"\n    url: \"https:\u002F\u002Fwww.keepit.com\u002Fsecurity\u002Fdata-centers\u002F\"\n  - title: \"Keepit: Opening of two Canadian data centres (March 2022)\"\n    url: \"https:\u002F\u002Fwww.keepit.com\u002Fpress\u002Fkeepit-announces-opening-of-two-canadian-data-centers\u002F\"\n---\n\nIt's Friday afternoon at a 25-person architecture firm in Montréal's Mile End. The office manager opens the shared projects folder and finds every drawing renamed and encrypted, OneDrive sync included. The recycle bin and version history help with a handful of files. For tens of thousands of documents, you need a real backup.\n\nMicrosoft protects its infrastructure, but restoring your data to a specific point in time is still your job. That's the shared responsibility model, and Microsoft says its position hasn't changed. We cover the basics in [Microsoft 365 backup: do you need it?](\u002Fen\u002Fblog\u002Fmicrosoft-365-backup-do-you-need-it). Now that Microsoft sells its own backup tool, the question isn't just \"should we back up?\" but \"with what?\"\n\nThis comparison puts the native tool, Microsoft 365 Backup, up against two established cloud services: Veeam Data Cloud for Microsoft 365 and Keepit.\n\n::callout{type=\"info\" title=\"Our method\"}\nWe focused on what matters to a Canadian SMB: a copy outside Microsoft, data location, coverage (Teams, Entra ID, Google Workspace), retention, immutability, restore options and pricing model. Every value comes from the vendors' official documentation, reviewed in October 2026. Prices change, so confirm them before you buy. This comparison is not sponsored.\n::\n\n## Microsoft 365 Backup: speed, without leaving Microsoft\n\nYou turn it on from the Microsoft 365 admin centre and pay as you go through an Azure subscription. The list price is US$0.15 per GB of protected content per month, and restores are free. Read the fine print on what counts: Microsoft also bills for the second-stage recycle bin, deleted and versioned mailbox items it retains, and online archives.\n\nThe strengths are real. Restore points are created every 10 minutes (for the past two weeks on OneDrive and SharePoint, then weekly up to 52 weeks; for 52 weeks on Exchange), and Microsoft advertises fast bulk restores, which is exactly what you want after ransomware. You can now restore specific files and folders, and search for individual mailbox items.\n\nThe limits are just as clear. Coverage is Exchange (user and shared mailboxes, not group or room mailboxes), OneDrive and SharePoint. Retention maxes out at two years. Most importantly, Microsoft says the data never leaves the Microsoft 365 trust boundary. That's why it's fast, but it isn't a copy held by someone else.\n\n## Veeam Data Cloud for Microsoft 365: two copies if you want them\n\nVeeam offers this as a managed service: no servers to deploy, with unlimited storage and 24\u002F7 support in every plan. Foundation is listed at US$3.50 per user per month for 10 to 50 users; Advanced adds Entra ID protection, and Premium adds fast, large-scale recovery.\n\nThe architecture is the main draw. \"Flex\" backups are stored in a Veeam-hosted Azure environment, isolated from Microsoft 365 and from your own systems, in the region you choose, including Canada Central. The Premium plan also lets you run \"Express\" backups on Microsoft 365 Backup storage. The result is an external copy and a fast-restore copy, managed from one console.\n\nOn the downside, Google Workspace isn't listed among the workloads Veeam Data Cloud protects, the prices are US-dollar MSRP that resellers may adjust, and the documentation we reviewed covers Teams channels rather than private chats.\n\n## Keepit: independent infrastructure, in Canada\n\nKeepit runs its own storage infrastructure instead of reselling a hyperscaler's. It opened two Canadian data centres in 2022 and states that customer data never leaves the chosen region. It keeps four copies across at least two sites per region; its data centres are ISO 27001 certified and its controls are covered by a SOC 2 Type II report.\n\nThe service covers Exchange, OneDrive, SharePoint, groups and teams, and a separate Keepit service protects Google Workspace, which is handy if your organization runs both. Retention is 5 years on the entry plan and 10 years on the higher tiers, with an unlimited add-on. The trade-offs: no published pricing, Entra ID requires a separate service, and entry-plan support runs during business hours.\n\n## One copy or two?\n\nThe [3-2-1-1-0 backup rule](\u002Fen\u002Fblog\u002F3-2-1-1-0-backup-rule-ransomware) calls for at least one off-site copy and one immutable or offline copy. Microsoft 365 Backup ticks the immutability box with a caveat: storage is append-only, but an administrator can still delete backups by offboarding the service, with a 90-day grace period.\n\nIn a [ransomware attack](\u002Fen\u002Fblog\u002Fransomware-small-business-attack-anatomy), a stolen admin account is exactly what attackers go after. Microsoft itself flags deleting backups and pausing billing as \"potentially harmful\" events that trigger email alerts. Turn those alerts on, whichever tool you choose.\n\n## How to choose\n\nStart with these questions:\n\n- **Does your insurer or a key client require a copy outside Microsoft?** If so, the native tool won't do it alone; Veeam or Keepit fill that gap.\n- **Do you also use Google Workspace?** Of these three, only Keepit covers both.\n- **How long must you keep records?** Two years at most with Microsoft; longer with Veeam Flex or Keepit.\n- **Where must your data live?** A \"Canada\" region isn't necessarily in your province. If backups hold personal information, check with your privacy officer and legal counsel.\n- **Should cost follow headcount or data volume?** A 10-person firm with heavy drawings and photos will pay very differently under each model.\n\nWhatever you pick, run a real test restore at least once a quarter. A backup you've never restored is just a theory.\n\nOur [Microsoft 365 and Google Workspace audit](\u002Fen\u002Fservices\u002Fmicrosoft-365-google-workspace-audit) checks what your backups actually cover, who can delete them and which alerts are in place.\n\n::cta{variant=\"devis\"}\n::\n",{"title":47,"description":256},[324,326,329,332,335,338,341,343,346,349,352,355,358,361,363,366,369],{"title":325,"url":277},"Microsoft Learn: Overview of Microsoft 365 Backup",{"title":327,"url":328},"Microsoft Learn: Pricing model for Microsoft 365 Backup","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-pricing",{"title":330,"url":331},"Microsoft Learn: Restore data in Microsoft 365 Backup","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-restore-data",{"title":333,"url":334},"Microsoft Learn: Set up Microsoft 365 Backup","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-setup",{"title":336,"url":337},"Microsoft Learn: Microsoft 365 Backup FAQ","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoft-365\u002Fbackup\u002Fbackup-faq",{"title":339,"url":340},"Microsoft Learn: ISO\u002FIEC 27001 in-scope Microsoft services","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fcompliance\u002Fregulatory\u002Foffering-iso-27001",{"title":342,"url":292},"Veeam: Veeam Data Cloud for Microsoft 365",{"title":344,"url":345},"Veeam: Veeam Data Cloud pricing and purchasing options","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-cloud\u002Fpurchasing-options.html",{"title":347,"url":348},"Veeam Help Center: Microsoft 365 backup storage regions","https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fm365_region_availability.html",{"title":350,"url":351},"Veeam Help Center: Backup object types","https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fm365_backup_object_types.html",{"title":353,"url":354},"Veeam Help Center: Veeam Data Cloud for Microsoft 365 security","https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fm365_security.html",{"title":356,"url":357},"Veeam Help Center: Workloads protected by Veeam Data Cloud","https:\u002F\u002Fhelpcenter.veeam.com\u002Fdocs\u002Fvdc\u002Fuserguide\u002Fwelcome.html",{"title":359,"url":360},"Veeam Trust Center","https:\u002F\u002Fwww.veeam.com\u002Fcompany\u002Ftrust-center.html",{"title":362,"url":307},"Keepit: Backup and recovery for Microsoft 365",{"title":364,"url":365},"Keepit: Plans and pricing","https:\u002F\u002Fwww.keepit.com\u002Fpricing\u002F",{"title":367,"url":368},"Keepit: Data centre security","https:\u002F\u002Fwww.keepit.com\u002Fsecurity\u002Fdata-centers\u002F",{"title":370,"url":371},"Keepit: Opening of two Canadian data centres (March 2022)","https:\u002F\u002Fwww.keepit.com\u002Fpress\u002Fkeepit-announces-opening-of-two-canadian-data-centers\u002F","en\u002Fcomparisons\u002Fmicrosoft-365-backup-comparison","sauvegarde-m365-outils",null,[376,379,382],{"profile":377,"pick":276,"why":378},"15-person office in Kingston, fully on Microsoft 365, with no external-copy requirement","A few clicks to turn on, fast bulk recovery after ransomware and a bill that tracks the data you protect. Plan for an external copy if requirements change.",{"profile":380,"pick":291,"why":381},"40-employee engineering firm in Ottawa whose insurer asks for a backup outside Microsoft 365","Published per-user pricing, unlimited storage and a Canada Central storage option. The Premium plan adds fast restores on Microsoft's backup storage.",{"profile":383,"pick":306,"why":384},"Montréal accounting firm running both Microsoft 365 and Google Workspace, with long record-keeping obligations","One vendor protects both environments (Google Workspace through a separate service), with a Canadian region and 5- to 10-year retention, extendable as an add-on.","October 2026","x1YqsR_fVYGcsa7_gkMhZN6UPyk54Vgn7uLExvbdfJo",{"path":388},"\u002Fcomparatifs\u002Fsauvegarde-microsoft-365-comparatif",[390,394,398],{"path":391,"title":392,"description":393},"\u002Fen\u002Fcomparisons\u002Fantivirus-vs-edr-vs-mdr","Antivirus vs EDR vs MDR: Which Endpoint Protection Do You Need?","Antivirus, EDR or MDR? Detection, response, 24\u002F7 monitoring, in-house skills and cost model compared for small businesses with 10, 50 or 150 employees.",{"path":395,"title":396,"description":397},"\u002Fen\u002Fcomparisons\u002Fbackup-nas-vs-cloud-vs-hybrid","Backups: Local NAS vs Cloud vs Immutable Storage vs Hybrid","On-site NAS, cloud backup, immutable storage or a hybrid 3-2-1-1-0 setup: ransomware resilience, restore speed, cost model and Canadian data residency compared.",{"path":399,"title":400,"description":401},"\u002Fen\u002Fcomparisons\u002Fbusiness-password-managers","1Password vs Bitwarden vs Keeper vs Dashlane for Business","1Password, Bitwarden, Keeper or Dashlane? Canadian data hosting, SSO, SCIM, pricing and compliance compared side by side for Canadian small businesses.",1792972906285]