Back Up

The Cloud Doesn't Back Up Your Data

Microsoft and Google explicitly say so in their terms of service. Most businesses don't discover this until it's too late.

Essential Guide

The Shared Responsibility Model

Microsoft and Google operate under a "shared responsibility" model. They protect the infrastructure—you protect your data. This guide explains what that means in practice and how to ensure your business data is truly protected.

Microsoft 365 Google Workspace OneDrive KFM
Cloud backup and data protection for Microsoft 365 and Google Workspace

The Uncomfortable Truth

Most businesses believe their data is safe because it's "in the cloud". Microsoft and Google's own legal terms tell a different story.

"We recommend that you regularly backup Your Content and Data that you store on the Services or store using Third-Party Apps and Services."

"We strive to keep the Services up and running; however, all online services suffer occasional disruptions and outages, and Microsoft is not liable for any disruption or loss you may suffer as a result."

— Microsoft Services Agreement, Section 6(b)

View current Microsoft Services Agreement →

"When permitted by law, Google, and Google's suppliers and distributors, will not be responsible for lost profits, revenues, or data, financial losses or indirect, special, consequential, exemplary, or punitive damages."

"Google does not make any commitments about the content within the services, the specific functions of the services, or their reliability, availability, or ability to meet your needs."

— Google Workspace Terms of Service

View current Google Workspace Terms →

In plain English: if your data is lost, corrupted, or deleted—that's your problem, not theirs.

What Cloud Services Actually Provide

Understanding the difference between high availability and backup is critical.

What They DO Provide

  • High Availability

    Data replicated across multiple data centres so the service stays online

  • Infrastructure Redundancy

    Protection against their hardware failures, power outages, and natural disasters at their facilities

  • Limited Retention

    Recycle bin and version history for a limited window (typically 30-93 days)

  • Physical Security

    Data centres are secure, climate-controlled, and access-restricted

What They DON'T Provide

  • Protection from User Deletion

    If you or your staff delete files (accidentally or deliberately), that's replicated everywhere

  • Ransomware Protection

    Encrypted files sync to the cloud as fast as healthy ones—your "backup" becomes encrypted too

  • Long-Term Retention

    Once retention windows close (30-93 days), data is permanently unrecoverable

  • Point-in-Time Recovery

    You can't restore your entire tenant to how it was 6 months ago

Understanding OneDrive "Backup"

What is Known Folder Move (KFM)?

When you enable "Backup" in OneDrive settings, you're actually enabling Known Folder Move. This redirects your Desktop, Documents, and Pictures folders so they sync to OneDrive instead of staying on your local hard drive.

KFM is Excellent For:

  • • Protecting against laptop loss or theft
  • • Accessing files from any device
  • • Preventing files being "trapped" on one computer
  • • Making device replacement seamless
  • • Ensuring remote workers' files are centralised

KFM Does NOT Protect Against:

  • • Accidental or malicious file deletion
  • • Ransomware encrypting synced files
  • • Data corruption replicating to the cloud
  • • Account compromise and data destruction
  • • Retention windows expiring

Key Insight: KFM is sync, not backup. It replicates changes in both directions—including deletions and corruptions. You should absolutely use KFM, but you also need independent backup.

How We Enable This Automatically

For businesses using Microsoft 365 Business Premium, we configure Intune to automatically enable Known Folder Move on every enrolled device. No manual setup required—it just works.

Automatic Enrollment

New devices automatically join Intune when users sign in with their work account

Policy-Driven KFM

Intune policies silently enable KFM—users don't need to do anything

No More "Local Only" Files

Eliminates files scattered across individual laptops that never get backed up

Real-World Scenarios

These situations happen every day. The difference between disaster and minor inconvenience is backup.

The Real Cost Comparison

Without Independent Backup

  • Average ransomware cost for SMBs: £115,000
  • Average downtime after data loss: 21 days
  • 60% of SMBs close within 6 months of major data loss
  • Regulatory fines for losing customer data
  • Reputational damage and lost client trust
  • Staff productivity loss rebuilding lost work

With Independent Backup

  • Typical cost: £2-4 per user/month
  • Recovery time measured in hours, not weeks
  • Point-in-time restore to any date
  • Immutable backups ransomware can't touch
  • Compliance with data retention requirements
  • Peace of mind that data is truly protected

For a 20-person company, comprehensive cloud backup costs roughly £50-80/month. That's the price of one team lunch to protect against potentially business-ending data loss.

The Complete Protection Stack

True data protection requires multiple layers working together. Here's what we implement for our clients.

Known Folder Move

Files sync to OneDrive automatically—no files trapped on laptops

Via Intune Policy

M365/Google Backup

Independent backup of all cloud data with long-term retention

3rd Party Solution

Immutable Storage

Backups that can't be modified or deleted—ransomware-proof

Write-Once Technology

Tested Restores

Regular restore tests prove backups actually work

Quarterly Verification

Frequently Asked Questions

Common questions about cloud backup and data protection

Don't Wait for a Disaster to Discover You're Not Protected

Let us audit your current backup situation. We'll show you exactly what's protected, what isn't, and what it would take to close the gaps.

Signal for Help

Ready to banish tech headaches? Fill out the form or book a chat directly. We respond faster than a speeding bullet (usually under 15 minutes).

✓ Trusted by local businesses for over 10 years

Thinking of switching providers? See how easy it is

Call The Batphone

01584 517 234

Email HQ

Face-to-Face

Send a Signal

Step 1 of 3

We typically respond within 15 minutes during business hours (Mon-Fri, 9am-5pm).

Existing Client?

Email support@fresh-tech.uk or call 01584 517 234 for urgent help.