Fresh Mango Technologies

Cloud to Cloud Backup

Cloud Backup is increasing in importance as more businesses move their data to the Cloud. Fresh Mango recommends the best solutions.

Secure backup and disaster recovery hardware beside a business laptop.

Cloud-to-Cloud Backup · Microsoft 365

Cloud-to-cloud backup is an independent copy of Microsoft 365 data — Microsoft Exchange mailboxes, SharePoint sites, OneDrive files and Microsoft Teams content — stored separately from Microsoft's own infrastructure so it can be recovered after deletion, corruption or a ransomware attack that Microsoft's native retention does not fully cover.

Moving to Microsoft 365 does not remove the need for backup; it changes what needs backing up and who is responsible for it. Microsoft operates the platform and protects its infrastructure, but under Microsoft's shared responsibility model the business remains responsible for its own data.

Fresh Mango Technologies configures and manages cloud-to-cloud backup for Microsoft 365 tenants across the British Virgin Islands, with the backup service itself delivered through our partner platform, NeoVault.

How cloud-to-cloud backup works

A backup service connects to a Microsoft 365 tenant and takes scheduled, independent copies of mailboxes, SharePoint document libraries, OneDrive files and Microsoft Teams content, storing them separately from Microsoft's own systems. If data is deleted, encrypted by ransomware, corrupted or maliciously altered, it is restored from the independent backup rather than relying solely on Microsoft's built-in retention.

This is distinct from the file versioning and recycle bin features built into SharePoint and OneDrive, which help with short-term accidental deletion but are not a substitute for a full, independently retained backup with a longer, business-defined retention period.

Why Microsoft 365 still needs independent backup

  • Microsoft's shared responsibility model covers the availability and security of the Microsoft 365 platform itself, not the recovery of a specific business's data once it has been deleted or overwritten.
  • Built-in retention periods are limited and can be shortened deliberately by an attacker or accidentally by an administrator before data loss is discovered.
  • Ransomware that reaches Microsoft 365 through synced files or compromised accounts can encrypt or corrupt data faster than native recovery tools can respond.
  • Departing staff, accidental bulk deletion and mailbox or site retirement are common, everyday causes of data loss that have nothing to do with an attack.

Who needs cloud-to-cloud backup

  • Any business that stores meaningful data in Microsoft Exchange, SharePoint, OneDrive or Microsoft Teams — which in practice means almost every Microsoft 365 tenant in the British Virgin Islands.
  • Regulated firms — legal, corporate services, trust, insurance and accounting — that must evidence they can recover client records on request.
  • Businesses that have previously relied on Dropbox, Google Drive or OneDrive sync alone and assumed that syncing counted as backup.
  • Any organisation planning for, or recovering from, a ransomware incident.

How Fresh Mango helps

Fresh Mango configures backup scope and retention against what the business actually needs to recover and for how long, rather than applying a single default to every tenant. Backups are monitored and periodically test-restored, because a backup that has never been restored is unproven.

The underlying backup platform is NeoVault, and cyber security controls that reduce the risk of an incident reaching Microsoft 365 in the first place — multi-factor authentication, email filtering, endpoint protection — are delivered through Complete Cyber Security.

Native Microsoft 365 retention compared with independent backup

ConsiderationNative Microsoft 365 retentionIndependent cloud-to-cloud backup
PurposeShort-term recovery of recently deleted itemsLong-term, independently stored recovery for any data loss scenario
Retention periodFixed and limited, can be altered by an administrator or attackerSet by the business, held separately from the live tenant
Ransomware protectionLimited — encrypted or overwritten files can propagate through syncIndependent copies unaffected by changes in the live tenant
ResponsibilityPart of the Microsoft 365 platform Microsoft operatesThe business's own responsibility under the shared responsibility model
Restore granularityVaries by workload and time elapsedRestore a single mailbox, file, site or Microsoft Teams channel on request

When should a business use this?

A departing employee's mailbox is deleted by mistake

Restore the mailbox and its contents independently of Microsoft's own retention window.

Ransomware encrypts files synced into SharePoint or OneDrive

Roll back to a clean, independently stored version rather than relying on native recycle bin recovery.

A regulator or client asks for evidence of data recovery capability

Show a documented, tested backup and restore process for Microsoft 365 data.

Retention needs to extend beyond Microsoft's default window

Set a business-defined retention period independent of Microsoft 365 configuration changes.

Best practices we recommend

  • Treat Microsoft 365 backup as mandatory, not optional, from the day a tenant goes live.
  • Confirm the retention period matches regulatory and business requirements, not just a vendor default.
  • Test restores periodically rather than trusting a successful backup report alone.
  • Cover all Microsoft 365 workloads in scope — mailboxes, SharePoint, OneDrive and Microsoft Teams — not email alone.
  • Pair backup with multi-factor authentication and endpoint protection to reduce how often it is actually needed.

Frequently asked questions

Doesn't Microsoft already back up our Microsoft 365 data?

Microsoft protects the availability and security of the Microsoft 365 platform, but under its shared responsibility model your organisation is responsible for its own data. Native retention and recycle bin features are limited in duration and are not a substitute for independent backup with business-defined retention.

Is OneDrive sync the same as a backup?

No. Syncing keeps a copy of files across devices, but a problem on one synced copy — deletion, corruption or ransomware encryption — can propagate to the others. Backup keeps an independent, point-in-time copy stored separately from the live, syncing data.

How long should Microsoft 365 backup be retained?

This depends on regulatory obligations and how quickly data loss is typically noticed in your business; many BVI professional firms retain well beyond Microsoft's native limits. Fresh Mango sets retention against your specific requirements rather than a single default.

What does cloud-to-cloud backup cost?

Cost is normally priced per user per month and scales with the number of mailboxes and the volume of SharePoint and OneDrive data covered. It is priced separately from Microsoft 365 licensing, since it is an independent service rather than a Microsoft feature.

Can a single deleted file or email be restored, or only the whole account?

Independent backup allows granular restore of a single mailbox, file, SharePoint site or Microsoft Teams channel, not just a full-account recovery. This is one of the main practical advantages over relying on native retention alone.

Does backup protect us from a ransomware attack?

Backup does not prevent an attack, but it is what allows recovery without paying a ransom, provided the backup itself is independently stored and unaffected by the attack. It should be combined with multi-factor authentication, email filtering and endpoint protection to reduce the likelihood of an incident in the first place.

Related services and guides

Practical advice, no obligation

Confirm your Microsoft 365 data is actually backed up

Book a free 30-minute consultation to check what your current Microsoft 365 retention actually covers, and close the gap with independent, tested backup.

Book Your Free 30-Minute Consultation
Cloud to Cloud Backup is increasing in importance as more businesses move their data to the Cloud. If you store documents or data in the Cloud, or have a Cloud-based server, you still need to back it up. Cloud servers are still physical servers, and so can fail or corrupt in exactly the same way as an on-premises server or storage device. The solution is to backup your data to a Cloud backup facility, in the same way as you would for a Physical server (You can read more about our Cloud Backup solutions here). The only difference is that you will require additional third party software to enable the backup from your Cloud Storage server to your Cloud Backup server.

Cloud to Cloud backup options

There are several options available for C2C backup, here are some we recommend.

This is the cheapest option, but it requires self-hosting the backup software, either on a physical device or on a cloud server. This solution allows you to use your own existing cloud storage (for example AWS).This option is more expensive, but it removes any external hosting requirements. We've shortlisted a couple of potential services:
  • Backupify: from Datto - uses vendor's own storage space
  • CloudAlly
  • afi.ai: includes unlimited storage space on Google Cloud
Should you require further information on backups or wish to ascertain the best solution for your business, please contact Fresh Mango Technologies today and we’ll be delighted to assist.Contact Fresh Mango Today!

Explore more in Cloud & Backup

Cloud servers, hosted desktops, offshore backup and disaster recovery.

View the Cloud & Backup hub

Not sure which Cloud & Backup option fits your business?

Contact Fresh Mango