Managed M365 Backup - Because Microsoft does not back up your data

Independent backup of Exchange Online, OneDrive and SharePoint. Granular restore, immutable storage, ransomware protection.

Independent of Microsoft infrastructure
Granular restore: files, folders, mailboxes
Immutable storage blocks ransomware
Self-service restore portal for end users
20+

Years Experience

International

standards

Certified

technician

Local

support in Kosovo

Predictable

costs

Microsoft 365 is NOT a backup

Microsoft protects the infrastructure — but the data inside is your responsibility. Native retention does not protect against accidental deletion, malicious insiders or ransomware.

Native retention has gaps

Microsoft retention policies are best-effort, not a backup. Accidental deletions past the retention window are lost forever.

Ransomware encrypts synced files

When ransomware strikes, it encrypts synced OneDrive files. Without an independent backup, recovery is impossible.

Insider threats and accidental deletion

Disgruntled employees or simple mistakes can permanently delete mailboxes, files and conversations.

Sync issues and corruption

Sync errors between devices and OneDrive can corrupt files. The synced copies overwrite each other with the corrupted version.

From data-at-risk to data-protected

Microsoft protects the infrastructure. You protect the data. Without backup, one deletion, one sync error, one ransomware attack erases years of work.

1

Microsoft retention ≠ backup

Default M365 retention holds deleted items for 30–93 days. After that, data is gone. Native retention does not protect against ransomware, sync errors, or malicious deletion.

2

Backup lives outside your tenant

Independent backup stores every Exchange mailbox, OneDrive folder, and SharePoint site in immutable storage. Even if your entire tenant is compromised, the backup is untouched.

3

Granular restore in minutes, not days

Restore a single email, a folder, or an entire mailbox through the self-service portal. No ticket roulette, no recovery from scratch.

Who recovers your data when something goes wrong?

76% of companies have experienced data loss in Microsoft 365 — and 1 in 3 of those lost data permanently because they had no backup.

Veeam Data Protection Trends Report 2024

From first call to fully backed-up M365 in 4 steps

Setup takes 3–5 days depending on mailbox count. No disruption — your staff keep working while we deploy.

01

Tenant audit

We connect to your Microsoft 365 tenant with read-only access. You receive a clear picture of every mailbox, site, and library that needs backup.

02

Backup deployment

We deploy the backup agent, configure storage and retention, and run the first full backup. You see it in the self-service portal immediately.

03

Restore test

We restore a sample mailbox and a OneDrive folder to prove the system works. You see exactly what a restore looks like — before you ever need one.

04

Daily automated backups

KPX monitors backup health, alerts on failures, and runs daily incremental + weekly full backups. Your M365 data is now independently protected.

Three service models — one fits your team

Choose the model that matches your team’s size and needs.

Full Service

Companies without IT staff

We handle everything

Platform & LicensesKPX handles

KPX Smart Managed Platform including licenses (e.g., NinjaOne, SentinelOne)

Monitoring & AlarmingKPX handles

Monitoring of the entire IT infrastructure

Operations & MaintenanceKPX handles

Troubleshooting, updates, and ongoing development

User Support (Helpdesk)KPX handles

Remote support, on-site when needed

Hybrid

SMBs with an internal IT team

We share tasks with your team and extend it

Platform & LicensesKPX handles

KPX Smart Managed Platform including licenses (e.g., NinjaOne, SentinelOne)

Monitoring & AlarmingShared

KPX monitors servers & backup; you handle the workstations

Operations & MaintenanceShared

Issues handled by whoever owns the area — joint development

User Support (Helpdesk)Shared

Your team helps remotely and on-site; KPX on demand

Self-Managed

Large IT teams

You operate independently — on our platform

Platform & LicensesKPX handles

KPX Smart Managed Platform including licenses (e.g., NinjaOne, SentinelOne)

Monitoring & AlarmingYour team handles

Monitoring of the entire IT infrastructure

Operations & MaintenanceYour team handles

Troubleshooting, updates, and ongoing development

User Support (Helpdesk)Your team handles

Remote support, on-site when needed

Why independent M365 backup matters

Microsoft's shared responsibility

Microsoft secures the infrastructure. You are responsible for the data inside it. Native retention protects against minor mistakes, not against ransomware, sync errors, or malicious insiders.

Immutable storage

Backup copies are stored immutably — no one can modify or delete them, including the attacker. Even if your entire M365 tenant is encrypted, your backup is untouched.

Granular restore, not full recovery

Restore one email, one folder, or one user — without rolling back the whole tenant. Self-service portal lets users recover their own data without filing a ticket.

What you get vs. what you don't

Native M365 retentionManaged M365 Backup (KPX)
Retention length30–93 daysUp to 7 years
Ransomware protectionNoneImmutable storage outside tenant
Restore granularityFull mailbox onlySingle item, folder, or full mailbox
Self-service restoreNoYes, per user via portal
Audit trailLimitedEvery restore logged & exportable
Recovery timeHours to daysMinutes

Sources & further reading

Questions about Managed M365 Backup

Is M365 backup necessary if we use Microsoft retention policies?

Yes. Microsoft retention policies are best-effort, not a backup. They do not protect against ransomware, malicious deletion or sync issues. A third-party backup is the only true safety net.

Where is the backup data stored?

In regional data centres in the EU and Kosovo, with the option to choose a specific region for compliance.

How long is the retention?

Configurable per workload. Typical SMB retention is 1 year for Exchange and unlimited for OneDrive and SharePoint.

Can users restore their own files?

Yes. We set up a self-service restore portal so users can recover deleted OneDrive files and email items without opening a ticket.

Can I cancel Managed M365 Backup if I'm not satisfied?

Yes. Our contracts run monthly after the initial setup phase. You can give notice at the end of any month. Your backup data is exported in standard formats on request.

Which backup tool does KPX use for M365?

We use Veeam Backup for Microsoft 365 (the de-facto standard) and, for smaller tenants, Hornetsecurity or Altaro. The choice depends on mailbox count, retention needs, and compliance.

How fast can I restore a single deleted email?

Granular restore is near-instant through the self-service portal. You search for the email, click restore, and it appears in your mailbox within minutes. No admin ticket needed.

What happens if my Microsoft 365 tenant is compromised?

If a ransomware attack encrypts your mailbox or synced files, you restore from immutable backup to a clean point in time. The attacker cannot encrypt or modify the backup copies — they live outside your tenant.

Does Microsoft 365 Backup cover Microsoft Teams?

Yes. We back up Teams chat history, channel files, and meeting recordings. Granular restore works per chat, per channel, or per file — whichever your team needs.

Is the backup data encrypted?

Yes. All backup data is encrypted at rest (AES-256) and in transit (TLS 1.3). Storage is in EU-based data centres, retained for 7 years by default. Longer retention available on request.

Service area

KPX IT Services LLC

Prishtina, Republic of Kosovo

Kosovo + Albania

+383 44 306 969

info@kpx-ks.com

Managed M365 Backup from Prishtina for SMBs across Kosovo and Albania — remote and on-site when needed.

Services that complement each other

These services work well together with what you just read about.

See our pricing

Transparent monthly per-device pricing — no hidden fees.

Open the full pricing overview
KPX · Prishtina, Kosovo

Your IT in reliable hands

Ready to take the next step? Book a free initial consultation — we'll review your current setup and show you the best way forward.

Fixed response time (SLA)Data protection per LPDOn-site service from Prishtina