Your SaaS data isn't backed up. Really.
Microsoft and Google keep the lights on — they don't keep a long-term copy of your files, emails or Teams chats. That's your job.
The shared responsibility gap
Microsoft 365 and Google Workspace both operate a shared responsibility model. They guarantee uptime and infrastructure. You're responsible for your own data — retention, recovery from user error, recovery after a malicious deletion, and legal-hold beyond short default windows.
Deleted mailboxes, SharePoint sites or Drive folders typically vanish for good after 30–90 days. If a staff member leaves and their licence is removed, their data can go with them unless you've planned for it.
GDPR and the right to restore
Under Article 32 of the GDPR, Irish businesses must have the ability to restore personal data in a timely way after a physical or technical incident. A proper backup isn't just good hygiene — it's a documented expectation of the regulation.
What SMEs should back up
- Endpoints — staff laptops and desktops.
- SaaS — M365 (Exchange, OneDrive, SharePoint, Teams) or Google Workspace (Gmail, Drive, Calendar, Contacts).
- Servers — any on-prem file server, NAS or line-of-business app database.
- Finance tools — Xero, QuickBooks and similar; exports on a schedule at minimum.
Recommended for Irish SMEs
Acronis Cyber Protect
Endpoint backup plus ransomware protection in a single console. Good fit for teams of 5–50 with a mix of laptops and servers.
See Acronis for Business →CloudAlly
Cloud-to-cloud backup for M365, Google Workspace and Salesforce. Daily automated backups with unlimited retention and EU storage.
See CloudAlly →Run on Microsoft 365 or Google Workspace?
You need a third-party backup. Learn why in our SaaS backup guide.