Partner solution · Keepit

M365 Backup &
Resilience

I set up an end-to-end backup strategy with Keepit for you: unlimited retention (Enterprise Unlimited) and data residency in the Zurich data center under the Keepit contract, relevant for the Swiss FADP (revDSG) and GDPR. From 25 licenses, the setup is free of charge; you only pay for the Keepit license with a contract term of 36 to 60 months. For smaller environments, I offer a fixed setup fee.

Free
Setup
From 25 licenses
2 weeks
Duration
Engineering sprint
Zurich
Residency
FADP / GDPR
Keepit Icon
Keepit Backup Dashboard - Your data is protected

Technical details

Detailed implementation of the disaster recovery architecture, standardized and measurable.

01 Infrastructure

Architecture (cloud-to-cloud backup of M365 & Teams)

Full connection of your Microsoft 365 tenant via the Microsoft Graph API for agentless backup.

Deliverables
  • Provisioning of the dedicated Keepit instance in the Zurich data center
  • Full backup of Exchange Online, SharePoint and OneDrive
  • Complete Microsoft Teams architecture, including Planner boards and channel structures
02 Identity

Identity (Entra ID Object Recovery)

Backup of the critical identity metadata layer through the dedicated “Keepit for Entra ID” module.

Deliverables
  • Backup of Conditional Access policies, users and roles
  • Backup of security groups and enterprise applications
  • Preparation for recovery after a complete tenant compromise
03 Storage

Storage (Immutable Storage & Retention)

True physical and logical separation of risk domains.

Deliverables
  • WORM technology: backup data is stored in a cryptographically immutable form
  • Zero limits: no storage limits and retention without a time limit
  • Predictability: no complex storage calculations or growing cloud costs
04 Resilience

Resilience (Disaster Recovery & Restore Simulation)

I validate the theory in practice.

Deliverables
  • Live test: logged restore test with measurement of RPO/RTO metrics
  • Runbook: creation of a detailed disaster recovery guide
  • Handover: transfer of all audit and restore procedures
Not included & risks

From 25 licenses, engineering and setup are free of charge as part of the Keepit license purchase; below that, a fixed setup fee applies. This setup is limited strictly to the cloud-to-cloud backup of Microsoft 365 and Entra ID. Backing up local file servers, Active Directory (on-premises), virtual machines or physical endpoints is explicitly out of scope and is not provided as a free service.

Business Case

The ROI for management.

Predictable OPEX costs
The “Enterprise Unlimited” model eliminates unpredictable costs. No hidden fees for ingress/egress traffic, not even in large-scale restore scenarios after an attack.
Swiss compliance & separation from Microsoft
Hosting in Zurich under the Keepit contract. Keepit's own cloud infrastructure, physically and logically separate from Microsoft's data centers. Supports the requirements of the FADP, GDPR and NIS2.
Unlimited retention
Retention without a time limit. No storage limits, no complex tiering calculations, no archiving costs after several years.
Independence from Microsoft
A backup held by Microsoft itself contradicts the principle of risk separation. If an attacker gains Global Administrator rights, they can delete internal Microsoft backups. Keepit runs on independent infrastructure.
Keepit Backup - Dashboard overview

Frequently asked questions

What needs to be in place before the sprint starts?

The sprint (Day 1) starts as soon as the Keepit SaaS licenses have been approved commercially and your IT has provided Global Administrator access for the initial registration of the enterprise app (Graph API).

How exactly does Keepit licensing work?

Keepit licenses on a simple per-seat model (per M365 user). To secure the unlimited retention period commercially, long-term contracts (typically 36 to 60 months) are the standard. From 25 licenses, engineering, setup and runbook creation by Flowbotics are completely free of charge in combination with the license purchase. For smaller environments, I offer a fixed setup fee.

Are there hidden costs for storage or traffic?

No. Unlike classic Azure or AWS storage models, Keepit Enterprise Unlimited has absolutely no additional costs for storage, data transfer or large restore operations.

Is a restore test really necessary?

Yes. A backup without a validated restore process is worthless. The sprint includes a mandatory documented restore simulation (e.g., restoring a deleted Conditional Access policy) so that your IT can act with confidence according to the runbook in an emergency (ransomware).

Read more in the knowledge article: Microsoft 365 backup: What Microsoft does not back up

Ready for real resilience?

By submitting, you agree to the privacy policy.

You will receive a reply by email within one business day.