Is your Business IT Support Actually Keeping you Safe? What You Should Know about Backups

---

A business owner calls us in a panic. A critical folder – containing months of invoices – has vanished from where you saved it. Or perhaps a staff member has left the company on bad terms and maliciously wiped their inbox before walking out the door. Or maybe, you’ve just clicked a link you shouldn’t have, and your screen has turned red with a ransomware demand.

The business owner asks their Business IT Support Company: “Can you just call Microsoft and get it back?”

It feels like the answer should be yes. You pay for Microsoft 365. Your data is “in the cloud.” Surely that means it’s backed up forever… right?

Wrong.

That is the single biggest myth in modern business technology. Microsoft 365 is an incredible platform for productivity, but it is not a backup solution. If you rely solely on Microsoft’s native tools to protect your data, you are running your business without a safety net.

In this guide, we will break down the simple truth about what you can lose, why the law says you are responsible for it, and how Yellowcom makes fixing this cheaper, safer, and simpler.

---

The “Landlord” Rule: Why Microsoft Won’t Save You

To understand why your data is at risk, you need to understand the deal you actually signed with Microsoft. It operates on what is known as the Shared Responsibility Model.

That sounds fancy, but here is the plain English explanation:

Microsoft is the Landlord. They are responsible for the building. They make sure the lights stay on, the doors lock, and the roof doesn’t leak. They ensure the global infrastructure is running, the servers are powered, and the software is accessible. If the Microsoft 365 platform goes down globally, that is their problem.

You are the Tenant. You are responsible for what is inside your office. Your furniture, your people, and most importantly, your data.

Think of it this way: If a pipe bursts in your rented office and ruins your expensive leather sofa, the landlord fixes the pipe. They do not buy you a new sofa.

Similarly, if Microsoft’s servers melt down, they will fix them. But if you accidentally delete a year’s worth of emails, or if a hacker encrypts your files, or if a disgruntled employee purges a SharePoint site? Microsoft is not responsible for restoring that data. They provide the bin; you decide what you throw in it.

---

The 5 Things You Can Still Lose (And Probably Will)

Without an independent backup—like the Spanning backup included in our User Bundle—here are the five specific things you are risking every day.

1. Emails (The “Whoops” Factor)

We have all done it. You are decluttering your inbox, moving fast, and you delete a folder you thought was old news.

Microsoft provides a “Deleted Items” folder. This is not a backup; it is a trash can. By default, Microsoft usually empties this automatically after 30 days.

The Real-World Scenario: Imagine a scenario where a customer disputes an invoice from six months ago. You know you have the email trail proving they agreed to the work. You go to find it, but you realise that folder was deleted during a spring clean three months ago. You check the trash. It’s empty.

That email—and your proof—is gone forever. Microsoft cannot bring it back once it has left the retention window.

2. SharePoint Files (The “Sync” Error)

We love the cloud because it syncs everything across all our devices. But that strength is also a weakness.

Syncing is instant. If a file becomes corrupt on your laptop because of a software crash or a hard drive failure, that corruption syncs to the cloud immediately. It overwrites the “good” version in SharePoint with the “broken” version.

Jargon Buster: Sync vs Backup

• Sync means “mirror.” If you delete a file on your laptop, the sync tool deletes it from the cloud to keep them matching. If you corrupt it here, you corrupt it there.
• Backup means “copy.” A backup takes a snapshot of your file and stores it separately. If you delete the live file, the snapshot remains untouched.

If you rely only on sync, you do not have a backup. You have a fragile mirror.

3. Teams Chats (The Lost History)

Modern business happens on Teams. Decisions are made there. Approvals are given there. But Teams is not designed as a permanent archive.

If a project ends and a manager deletes the “Project X” Team to tidy up the sidebar, everything in it vanishes. The chats, the files shared in the channel, the wiki notes—poof.

Trying to retrieve deleted Teams chats without a dedicated backup tool is a nightmare. Native retention policies are complex and often set to delete old chats automatically to save space. If you need to review a conversation for a disciplinary hearing or a tribunal, and it’s been deleted? You have zero visibility.

4. OneDrive Data (The Ransomware Target)

Ransomware is the boogeyman of Cybersecurity for Business. It locks your files and demands payment to release them.

Many people think, “It’s fine, my files are in OneDrive, not on my computer.”

Here is the problem: OneDrive creates a folder on your computer that mirrors the cloud. If your computer gets infected, the ransomware encrypts the files in your local OneDrive folder. OneDrive then “helpfully” sees these changes and syncs the encrypted, locked files to the cloud.

Your “cloud copy” is now also held for ransom. You log in from another computer, and all you see are locked files.

Without an independent backup that takes “snapshots” of your data over time, you cannot simply roll back to yesterday. You are at the mercy of the criminals.

5. Ex-Employee Data (The Leaver’s Trap)

When an employee leaves your business, you usually want to stop paying for their licence. It makes financial sense.

But the moment you delete that user’s Microsoft 365 licence, a timer starts. After 30 days, Microsoft permanently deletes their mailbox and OneDrive data to free up space on their servers.

Six months later, you might realise that the ex-employee was the only person who had the login details for a key supplier, or the only one who saved the final contract drafts. You go to check their old emails, but they are gone.

A proper backup solution lets you archive that leaver’s data indefinitely without paying for a Microsoft licence, keeping it safe and accessible for years.

---

---

The Scary Legal Stuff: Why Backups are the Law

You might think backups are just “good IT practice”—something nice to have if you can afford it.

Actually, for most businesses in the UK and Ireland, they are a legal requirement.

If you handle any personal data—names, email addresses, phone numbers of customers or staff—you are bound by the UK GDPR and the Data Protection Act 2018.

Most people think GDPR is just about keeping data secret (Confidentiality). But the law actually has three pillars for data security:

1. Confidentiality: Keep it secret.
2. Integrity: Keep it accurate.
3. Availability: Keep it accessible.

Article 32: The “Availability” Rule

Article 32 of the GDPR is the part business owners often ignore. It specifically states that you must have “the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident”.

This is non-negotiable.

Plain English Translation: If you suffer a ransomware attack or an accidental deletion, and you lose customer data, you haven’t just had “bad luck.” You may have broken the law because you failed to ensure the availability of that data.

If a customer submits a “Subject Access Request” asking to see the data you hold on them, and you say, “Sorry, we accidentally deleted it and we have no backup,” you are in breach of GDPR.

The Cost of Getting It Wrong

The Information Commissioner’s Office (ICO) takes this seriously. They define “Availability Breach” as a recognised category of data breach where accidental loss of access to data occurs.

The fines can be devastating:

• Tier 1 Fines: For serious infringements, fines can reach up to £17.5 million or 4% of annual global turnover.
• Tier 2 Fines: Even lower-tier fines for administrative failures can hit £8.7 million or 2% of turnover.

Having a secure, independent backup isn’t just about peace of mind or convenience; it is your “get-out-of-jail-free” card for compliance audits. It proves you have taken the technical measures required by law to protect your data “availability.”

---

Terms You Need to Know

To help you navigate the Cybersecurity for Business landscape, here are a few terms explained simply:

• Ransomware: A malicious virus that locks your files behind a password. The criminals demand money (a ransom) to give you the password. If you have a backup, you don’t need to pay; you just restore your files from before the lock was applied.
• Metadata: This is data about your data. For example, “who created this file” and “when was it last edited.” If you restore a file poorly (e.g., by emailing it to yourself), you lose this history. Proper backup keeps it.
• Latency: This refers to the delay in data transfer. Good Business Broadband reduces latency, ensuring your backups happen quickly in the background without slowing down your work.
• Seat/Licence: This is the monthly subscription you pay for each user (e.g., one employee = one seat). Backup costs are usually calculated “per seat.”

---

---

What Actually Is “The Cloud”… And Where Does Your Data Go When You Press Save?

When we talk about Business IT Support, we throw around the word “Cloud” constantly. But when you click that little save icon in Word or Excel, where does your data actually go?

It doesn’t float up into the sky. In reality, “The Cloud” is just a fancy word for someone else’s computer.

Specifically, it is a giant, windowless warehouse full of super-computers, usually sitting in an industrial estate in Dublin, London, or Amsterdam. These buildings are fortresses; they have armed guards, massive diesel generators, and advanced cooling systems to keep the computers running 24/7.

The “Live Link” Trap

When you use Microsoft 365, you aren’t just storing files in that warehouse; you are creating a live link between your laptop and their servers.

Think of it like a Magic Whiteboard.

• You have a whiteboard in your office (your laptop).
• Microsoft has an identical whiteboard in their warehouse (The Cloud).
• Because they are linked, whatever you write on your board instantly appears on theirs. This is great for working from home!

But here is the problem: If you accidentally wipe your whiteboard clean, or if a vandal (ransomware) sprays paint all over it, the link works too well. The “Cloud” sees the change and instantly wipes its whiteboard too, just to keep them matching.

This is why “The Cloud” is not a Backup. A real backup is like taking a photocopy of your whiteboard every hour and locking it in a fireproof safe in a completely different building.

That is what Yellowcom does. We don’t just rely on the magic whiteboard. We keep the safe, separate photocopies. So when the whiteboard gets wiped, we can just pull out the paper copy from an hour ago and get you back to work.

Cybersecurity for Business: It’s Cheaper, It’s Safer, It’s Simpler

You don’t need to hire an expensive GDPR consultant or buy five different pieces of software to fix this. You just need the right Business IT Support partner.

At Yellowcom, we don’t sell you a confusing list of parts. We offer the User Bundle, which turns your staff into a human firewall and protects their data automatically.

We believe that Cybersecurity for Business should be invisible and effective. That’s why we include Cloud Backup as standard in our User Bundles.

How Cloud Backup Fixes the Problem:

Cloud-to-Cloud Backup: Your data is copied directly from Microsoft’s servers to a completely separate, secure cloud. If Microsoft goes down, or if your account is hacked, your backup is safe in a different location.

• Restore in Minutes: Accidentally deleted a critical folder? We don’t have to submit a ticket to Microsoft and wait weeks. We can log in, find the file, and restore it to your desktop in minutes.
• Ransomware Recovery: If you get hit by ransomware, we simply “rewind” your data. We look at the backup from the hour before the infection and restore that clean snapshot. It’s like the attack never happened.
• Retention on Your Terms: We can keep your data indefinitely. Even if you delete a user or an email, our backup remembers it.

This bundle also includes Dark Web Monitoring (to see if your passwords are currently being sold by criminals) and Security Awareness Team Training (to teach your staff how to spot the phishing emails that cause these messes in the first place).

---

The Checklist: Is Your Current IT Guy Actually Protecting You?

Many competitors will sell you Business IT Support or Cybersecurity for Business but leave you to worry about the backups yourself. They will set up your email and leave the rest to chance.

Don’t let them get away with it.

Ask your current provider these three questions today. If they hesitate, stumble, or give you a vague answer, your business is at risk.

1. “If I delete a file today and notice in 6 months, can you get it back?” (If they say they rely on the Microsoft Recycle Bin, the answer is NO. The bin will likely be empty.)

2. “If we get ransomware in OneDrive today, how fast can we restore all our files?” (If they don’t have a specific tool like Cloud Backup or Advanced AntiVirus, the answer is likely “days,” “weeks,” or “we can’t guarantee it.”)

3. “Is my backup on a separate cloud from Microsoft?” (If it’s not, you are keeping all your eggs in one basket. If your main account is compromised, your “backup” might be compromised too.)

---

One Partner, One Bill, No Headaches

At Yellowcom, we simplify the complex. Whether you need Business Broadband to stay connected, Business Phone Systems to talk to your customers, or Business Mobiles for your team on the road, we handle it all.

We are your digital foundation. We handle the tech—the backups, the security, the updates—so you can handle your business.

Ready to stop relying on luck?

Don’t wait until you’ve lost the file. It’s Cheaper, It’s Safer, It’s Simpler to fix it today.

---

Useful Resources

• Cloudflare: What is the Cloud?
• Information Commissioner’s Office: GDPR Guidance and Resources
• Microsoft: The Shared Responsibility Model
• National Cyber Security Centre: Mitigating Malware and Ransomware Attacks
• National Cyber Security Centre: Small Business Cyber Security Guide