We sat in a conference room once while three people used the word “archive” to mean three different things in the same five minutes. The office manager meant the folder where old messages go so the inbox stays tidy. The bookkeeper meant “we keep seven years of records.” The owner meant “if something gets deleted we can get it back.” All three were reasonable. None of them were talking about the same product, and the quote on the table only solved one of the problems.
This confusion costs real money in both directions. Some businesses buy three overlapping services because a vendor said each was essential. Others buy nothing because they assume what they already have covers all three. Archiving, backup, and retention are three separate jobs, and sorting out which you need takes about ten minutes once someone lays it out plainly.
One Conversation, Three Different Jobs
Here is the shortest version we know.
- Archiving preserves and makes findable. It is about keeping mail available and searchable over the long haul, usually somewhere other than the working inbox.
- Backup restores after loss. It is about getting content back to a known good state after deletion, corruption, or an attack.
- Retention decides how long things live. It is a rule about lifespan: keep this for a period, then delete it, or keep it forever, or delete it on a schedule.
The trap is assuming these overlap more than they do. Having one does not give you the others, and each solves a different bad day.
Archiving Keeps It and Makes It Findable
In Microsoft 365 terms, this is the archive mailbox. Microsoft Learn describes it this way: after you turn on archive mailboxes, sometimes called In-Place Archiving, a user’s current mailbox becomes their primary mailbox and “an additional and associated mailbox is created, called the archive mailbox.” Users get to it through Outlook and Outlook on the web, and they can move or copy messages between the two.
The part that matters for anyone facing a legal request or an internal investigation is this line from the same documentation: “Both mailboxes are considered a user’s mailbox for compliance features such as Content search from the Microsoft Purview portal, Microsoft 365 retention, and Litigation Hold.” Moving something to the archive does not put it out of reach of a search. That is the point. An archive is not a hiding place, it is a bigger filing cabinet the search tools still cover. Microsoft Learn documents a large block of additional storage once archive mailboxes are enabled, plus an auto-expanding option for organizations that outgrow it.
The scenario archiving solves: someone needs to find every message about a project from four years ago, and you need those messages to still exist and still be searchable.
Backup Gets It Back
Backup answers a completely different question: something went wrong, how do we return to how things were. Microsoft’s own documentation for Microsoft 365 Backup frames the scenarios it is built for as including a “ransomware attack that encrypts large swaths of your data, or instances of an internal accidental or malicious data deletion or overwrite event.” It covers SharePoint sites, OneDrive accounts, and Exchange mailboxes, and it works through point-in-time restore, meaning you pick a moment before the damage and roll back to it.
Microsoft ships this as a separate offering rather than folding it into the retention tools. That is a strong hint about how distinct these jobs are, and the documentation makes the separation explicit: “Retention and deletion policies (for example, from Purview) don’t affect the backup retention period, which remains fully isolated from those policies.” Two different systems, two different clocks.
Third-party backup products for Microsoft 365 are plentiful and many are excellent. The point is not which one to buy. It is that “we have an archive” and “we have a retention policy” are not answers to “can you restore last Tuesday.”
The scenario backup solves: a mailbox gets wiped, a folder gets encrypted, or a departing employee deletes their sent items on the way out.
Retention Decides How Long Things Live
Retention is the rule, not the container. Microsoft Learn describes retention settings as producing three possible outcomes: retain only, delete only, or retain and then delete after a specified period. That third one is the shape most businesses actually want, because keeping everything forever is its own liability.
The documentation lists goals including to “Comply proactively with industry regulations and internal policies” that require keeping content for a minimum period, and to “Reduce your risk in the event of litigation or a security breach” by permanently deleting old content you no longer need. Both directions matter. Deleting on schedule is a security control, not just housekeeping.
If you configure retention, learn the tie-breaking rules first. Microsoft Learn lays out four principles when multiple settings collide: “Retention wins over deletion,” “The longest retention period wins,” “Explicit wins over implicit for deletions,” and “The shortest deletion period wins.” The practical implication is that retention errs toward keeping things, which is comforting when you feared losing data and frustrating when you were counting on cleanup.
The scenario retention solves: a policy or contract says certain records live for a defined period, and you want that enforced automatically instead of relying on people to remember.
What You May Already Be Paying For
Before you buy anything, look at what is sitting unused in your subscription. This is where we save clients money more often than anywhere else.
- Archive mailboxes. Included with many Microsoft 365 plans and frequently switched off because nobody ever turned them on. Check before you price an archiving product.
- Retention capability. The tools to set retention live in the Microsoft Purview area of your tenant. Capability varies by license, so confirm what your specific plan covers.
- Backup. This is the one least likely to be sitting there for free. Microsoft 365 Backup is a consumption-based add-on billed on what you protect, and third-party options are separate purchases. Budget for it as a real line item.
- Whatever a department bought on a credit card. We regularly find a team quietly paying for a mail archiving tool the company already had. That is shadow IT in its most expensive and least dramatic form.
Now decide, in this order. First, ask whether anyone will ever need to find old email, and how far back. That determines archiving. Second, ask what happens if a mailbox disappears tomorrow and how much downtime that costs. That determines backup, and for most businesses it is the highest-value of the three because it is the only one that answers an emergency. Third, ask whether any contract or policy dictates how long records live. That determines retention, and it is worth confirming with your attorney rather than guessing.
Plenty of small businesses genuinely need only two of the three. That is a legitimate answer, and a vendor who insists otherwise without asking those three questions is selling, not advising.
The Bottom Line
Archiving, backup, and retention answer three different questions: can I find it, can I get it back, and how long does it stay. Buying one and assuming you covered all three is how businesses find the gap at the worst possible moment. Inventory what your subscription already includes, then fill the real gaps deliberately. And remember all three live in someone else’s data center, because the cloud can go down and your plan should account for that.
If you would like someone to open your tenant, tell you plainly what you already own, and map it against what you need, that is a short engagement and usually a pleasant surprise. We work with small and mid-sized businesses across Denton County. Contact us today.
Sources:
Comments are closed