Something important gets deleted from Microsoft 365. How long do you actually have to get it back? The answer is a fixed number of days, and it’s shorter than most business owners expect.
Most businesses run on Microsoft 365 without ever thinking about what happens when something disappears. It’s the cloud, so surely it’s recoverable.
It is, for a while. Then it isn’t. Here’s exactly how long that while lasts.
The Clock Starts the Moment Something Is Deleted
Microsoft 365 doesn’t delete things instantly. Each service holds deleted items for a set period, then removes them permanently. Those periods are fixed, they’re documented by Microsoft for both Exchange Online and SharePoint and OneDrive, and once they expire there is no support ticket that reverses it.
| What was deleted | How long you have | After that |
|---|---|---|
| Email, permanently deleted from Outlook | 14 days (30 max) | ✗ Removed from Exchange |
| Files in OneDrive | 93 days | ✗ Permanently deleted |
| Files and documents in SharePoint | 93 days | ✗ Permanently deleted |
Email figures are Microsoft’s documented default for Exchange Online mailboxes; an administrator can raise it, but 30 days is the maximum. Recycle bin retention for SharePoint and OneDrive is 93 days from the point of deletion.
Almost everyone believes deleted email is kept for 30 days. That’s the maximum an administrator can configure. The default is 14 days, and on most small business tenants nobody has ever changed it. If your bookkeeper deletes an invoice thread and mentions it three weeks later, it’s already gone.
The Real Problem Isn’t the Deletion. It’s the Delay
If deletions were noticed the same day, these windows would be plenty. They aren’t. The scenarios that actually cost businesses data all share one trait: nobody realises anything is missing until long after the clock has run out.
- Accidental deletion. Someone tidies up a mailbox folder or a shared library. The gap isn’t spotted until the next quarter, when somebody goes looking for a specific document
- Overwritten files. A document is replaced with a newer version that’s missing half its content, and the original is gone before anyone compares them
- Ransomware. Files are encrypted locally and the encrypted versions sync straight up to OneDrive or SharePoint, replacing the good copies
- A compromised account. An attacker deletes or alters data before the breach is even detected, and detection is rarely fast
- Employee turnover. A licence is removed when someone leaves, taking their mailbox and OneDrive with it, before anyone checks what was in there
Why Microsoft Won’t Recover It For You
This isn’t Microsoft being unhelpful. It’s how the arrangement is written.
Microsoft’s shared responsibility model sets out who protects what across cloud services. Microsoft is responsible for the infrastructure, the datacentres, the physical network, the servers. The customer is responsible for their own data, and Microsoft’s own documentation lists data first among the “responsibilities you always retain,” for every deployment type including Microsoft 365.
The Microsoft Services Agreement says it even more directly: “We recommend that you regularly backup Your Content and Data that you store on the Services.”
Retention answers “was this deleted in the last couple of weeks?” A backup answers “can we get this back, whenever we need it?” Microsoft 365 gives you the first one. The second one is something you add.
What Businesses Do About It
The fix is a dedicated Microsoft 365 backup, an independent copy of your data held outside your Microsoft tenant, with no expiry clock attached. A proper backup covers Exchange Online mail and calendars, OneDrive files, SharePoint sites and libraries, and Teams conversations and channels, and it lets you restore a single email, one file, or an entire mailbox.
We wrote about how this works in more detail in Does Microsoft 365 Back Up Your Email and Files?
Ask whoever manages your IT: “If someone deleted a folder six months ago and we noticed today, could we get it back?” A yes means you have a backup. Anything else means you have a retention window, and you now know how many days are in it.
Frequently Asked Questions
How long do I have to recover a deleted email?+
If it’s still in the Deleted Items folder, it stays until that folder is emptied. Once it’s permanently deleted, emptied from Deleted Items, or removed with Shift+Delete, it moves to the hidden Recoverable Items folder and is kept for 14 days by default. An administrator can extend that to a maximum of 30 days for Exchange Online mailboxes.
What about files deleted from OneDrive or SharePoint?+
They go to the recycle bin and are retained for 93 days from the moment they were deleted from their original location. That’s a considerably longer window than email, but it is still a window, after it expires the files are permanently deleted.
Can Microsoft support restore data after the window closes?+
No. Once the retention period expires, the item is removed and Microsoft has no mechanism to bring it back for you. This is why Microsoft’s own Services Agreement recommends that customers keep their own regular backups.
Doesn’t the recycle bin protect me?+
Only for as long as it holds the item. A recycle bin is a delay before permanent deletion, not a second copy stored somewhere safe. It also won’t help with an overwritten file, because nothing was deleted, the good version was simply replaced.
What if an employee leaves and we delete their account?+
Removing a licence or deleting an account starts the clock on that user’s mailbox and OneDrive. Before offboarding anyone, make sure their data has been preserved somewhere: either converted to a shared mailbox, transferred to a colleague, or captured in a backup. It’s one of the most common ways businesses lose data without ever realising a deletion occurred.
Find Out What You Could Actually Recover
Twilight I.T. can check your Microsoft 365 tenant, tell you exactly what your current retention settings are, and put a real backup in place if you don’t have one.
Terms Explained
Not a tech person? No problem. Here’s what these concepts actually mean in plain English.
Sources
