Do I Need to Back Up My Data If It’s in the Cloud?

Yes. Data in the cloud still needs a backup, because the cloud provider protects its service, not your files. Microsoft, Google and Amazon will keep the platform running through a hardware failure, but their terms make you responsible for what is stored in it, and the everyday causes of loss, a deleted mailbox, a ransomware infection that syncs to every device, an employee who leaves, a retention window that quietly expires, are exactly the ones they do not cover. This article, first published in 2024 and updated in September 2026, explains what the provider does and does not protect, where a synced folder differs from a backup, and what a proper cloud backup costs.

What the provider protects, and what it does not

Every large cloud provider runs redundant hardware in multiple data centers, so a failed disk or a burned-out server will not lose your data. That is availability, and they are very good at it. What they do not promise is recovery from your own actions or from an attacker using your credentials. Microsoft’s service agreement says plainly that you should regularly back up content stored with the service. Google’s and Amazon’s say the same thing in different words. The provider’s job is to give you back exactly what is in the account; if what is in the account is wrong, that is what you get.

Six ways cloud data disappears

• Deletion. A user empties a folder, an administrator removes a former employee’s account, and the retention window runs out. Microsoft 365 keeps deleted mailbox items for a limited period and a removed account for 30 days by default; after that, recovery is not possible.
• Ransomware. Encryption on one laptop syncs to OneDrive or SharePoint and from there to every other device. Version history can roll back one file at a time, which is little help against fifty thousand.
• Account compromise. An attacker with the password can delete data, purge the recycle bin and disable the retention policy before you notice, and modern groups delete backups they can reach before they encrypt anything.
• Malicious or careless insiders. A departing employee clears their files, or someone bulk-moves a shared library and breaks every link.
• Application errors. A misconfigured migration tool, a sync client conflict or a third-party integration with too many permissions can overwrite good data with bad.
• Outages and account lockouts. Rare, but a suspended tenant or a billing lapse can make the data unreachable for days, and the business still has to run.

Sync is not backup

OneDrive, Google Drive and Dropbox keep a folder identical across devices. That is their purpose, and it is why they cannot be your backup: a change on one device, including a deletion or an encryption, is the change everywhere within seconds. A backup is a separate copy, taken on a schedule, kept somewhere the sync client cannot touch, with its own credentials and its own retention. Our 3-2-1 backup guide explains the rule of thumb: three copies, on two kinds of storage, one of them off site or with a different provider.

What a proper cloud backup looks like

• Held by someone other than the service provider. Backing up Microsoft 365 into Microsoft 365 defeats the purpose.
• On a schedule you set, with retention measured in months or years rather than the provider’s default weeks.
• Protected by separate credentials, so a compromised admin account cannot delete the backup along with the data.
• Covering everything that matters: mail, OneDrive, SharePoint and Teams for Microsoft 365; the equivalent for Google Workspace; and the servers, physical or virtual, that the business actually runs on, wherever they are hosted.
• Restore-tested, because a backup that has never been restored is a hope, not a plan. How to know whether your backups are good lists what to check.

What it costs

Our cloud backup service is $100 per server per month, for Windows, Mac, Linux and AIX servers, physical or virtual, and $5 per user per month for Microsoft 365, covering email, OneDrive and SharePoint. Computer and Google Workspace backups are quoted separately. A technician reviews the backups rather than an unread email report, and restores are tested on a schedule. For a ten-person office with one server that is $150 a month, which is less than the first hour of a ransomware recovery without one. Preventing ransomware attacks covers the other half of the picture.

Common questions

Does Microsoft back up my Microsoft 365 data?

Microsoft keeps the service running and protects against its own hardware failures, but its terms make you responsible for your data. Deleted items are recoverable for a limited window, typically 30 to 93 days depending on the item, and after that they are gone. A ransomware event, a malicious employee or a deleted account can empty a mailbox or SharePoint site in minutes.

Is OneDrive or Google Drive a backup?

No. They are synchronization services: whatever happens on one device, including deletion or encryption by ransomware, is copied faithfully to the cloud and every other device. Version history helps with a single file but not with thousands of files changed at once.

How much does cloud backup cost?

Our server backup is $100 per server per month and Microsoft 365 backup is $5 per user per month, covering email, OneDrive and SharePoint. The calculator on our cloud backup page gives the exact monthly figure for your mix.

How long does a cloud provider keep deleted data?

It varies by service and item type, from a few days to about three months, and some deletions, such as a removed user account after its retention period, are permanent immediately. A separate backup is the only way to choose your own retention.

What should a good cloud backup include?

A copy held by a different company than the one running the service, kept on a schedule you control, retained for as long as you need, protected by its own credentials so a compromise of your main account cannot delete it, and restore-tested regularly so you know it works before you need it.

Talk to us

Call 952-548-5558 or contact us; the first conversation is free and there is no long-term contract.