Information & data
Services · Backup as a Service
Backup for an always-recoverable Microsoft 365
Automated backup of Exchange Online, SharePoint, OneDrive and Teams. Unlimited storage and retention, on a fixed monthly fee per user. Granular recovery. Implemented by Menshen on Veeam Data Cloud: run by us or by your team.
Built on Veeam Data Cloud.
Menshen BaaS runs on Veeam Data Cloud. Menshen is a Veeam Registered Reseller and Registered Service Provider, with VMCE Veeam Certified Engineer — Veeam's official technical certification in backup and recovery. engineers on the team.
The same platform trusted by some of the world's largest organisations
Why it's necessary
Microsoft does not back up your data
Microsoft is responsible for the availability of the Microsoft 365 platform: high availability, recovery of its own data centres, geographic replication. It is not responsible for the content of your data.
"Microsoft is not responsible for any disruption or loss you may suffer. In the event of a failure, you may not be able to retrieve Your Content or Data. We recommend that you regularly back up Your Content and Data."
Microsoft Services Agreement, Section 6B
Data protection is a shared responsibility: Microsoft covers the platform; you cover the content. Menshen BaaS is your half of the equation.
Shared responsibility
What is always yours
Whatever the service type ( SaaS Software as a Service — cloud-hosted apps run by the vendor, like Microsoft 365. , PaaS Platform as a Service — the vendor runs the infrastructure; your team runs the apps. , IaaS Infrastructure as a Service — cloud servers and storage; your team manages the OS and apps. or on-prem On-premises — systems installed and run in your own facilities. ), some responsibilities never leave your hands.
Devices (PCs & mobile)
Accounts & identities (access management)
Information, data and identities are always the customer's responsibility: in SaaS, PaaS, IaaS or on-prem. Independent backup is how you meet it.
See the full shared-responsibility model
Who's responsible: Customer Shared Microsoft
Swipe horizontally to see the full table →
| Responsibility | SaaS Software as a Service — cloud-hosted apps run by the vendor, like Microsoft 365. | PaaS Platform as a Service — the vendor runs the infrastructure; your team runs the apps. | IaaS Infrastructure as a Service — cloud servers and storage; your team manages the OS and apps. | On-prem On-premises — systems installed and run in your own facilities. |
|---|---|---|---|---|
| Information & data | Customer | Customer | Customer | Customer |
| Devices (PCs & mobile) | Customer | Customer | Customer | Customer |
| Accounts & identities | Customer | Customer | Customer | Customer |
| Identity & directory infrastructure | Shared | Shared | Customer | Customer |
| Applications | Microsoft | Shared | Customer | Customer |
| Network controls | Microsoft | Shared | Customer | Customer |
| Operating systems | Microsoft | Microsoft | Customer | Customer |
| Physical servers & storage | Microsoft | Microsoft | Microsoft | Customer |
| Physical network | Microsoft | Microsoft | Microsoft | Customer |
| Physical datacenter | Microsoft | Microsoft | Microsoft | Customer |
Real risks
What backup actually protects against
Independent backup protects against scenarios that Microsoft redundancy doesn't cover.
Accidental deletion
A user deletes a mailbox, a SharePoint folder, or a OneDrive document. After 30-93 days (depending on the Microsoft product), the data is no longer recoverable through Microsoft support.
Malicious deletion
A departed employee, an attacker with compromised credentials, or an internal actor deletes data deliberately. Without independent backup, it's irreversible.
Ransomware via compromised SaaS
Increasingly sophisticated attacks hit the Microsoft 365 tenant directly (token theft, OAuth abuse). They encrypt or delete files via API. Microsoft "snapshots" aren't designed for forensic recovery.
Retention configuration errors
Misconfigured retention policies, mishandled user lifecycle, licence conflicts. Configuration is the customer's responsibility; independent backup is the safety net.
Legal & compliance requirements
Long-term retention, eDiscovery and legal-hold obligations the platform alone doesn't satisfy. Audits and litigation demand immutable, searchable copies outside the tenant.
Teams data structure
Teams data is scattered across Exchange, SharePoint and OneDrive. Native protection is fragmented and doesn't cover the full set of chats, channels, files and notebooks coherently.
Editions
Three editions, fixed fee per user
Edition 1 of 3
Foundation
Full Microsoft 365 backup: Exchange, SharePoint, OneDrive and Teams. Unlimited storage, immutable copies and granular restore.
fixed monthly fee per user
On requestEdition 2 of 3
Advanced
Everything in Foundation, plus Microsoft Entra ID backup (users, groups and application registrations) and advanced threat detection.
fixed monthly fee per user
On requestEdition 3 of 3
Premium
Everything in Advanced, plus disaster recovery and ransomware recovery.
fixed monthly fee per user
On requestNo ingestion fees. No CAPEX.
Benefits
What you get
No capital investment
Zero CAPEX on backup hardware, storage, licences or specialist headcount. Predictable monthly operational expense.
Immutable, isolated copies
Backups live in a location air-gapped from your Microsoft 365 tenant. Once written, data can't be altered or deleted, not by administrators, not by attackers.
AES-256 encryption
256-bit encryption in transit and at rest. Stored in Microsoft Azure, in a data region of your choice (EU residency available).
Granular recovery
Restore a single email, a single file, a single mailbox, or the entire tenant. Admin self-service restore on eligible plans.
Continuous monitoring
In the managed service, every backup's success is monitored by the Menshen team, with a monthly health report and proactive alerts on failure.
Delivery models
You run it, or we run it
The BaaS is yours. Who operates it is your call, and it can change over time.
Implementation and handover
Menshen sets up backup on your tenant Your organisation's Microsoft 365 environment — your users, data and settings. , validates it and hands operation over to your team, with training. From there, your team manages the policies and runs the recoveries.
Managed service
Menshen operates backup for you: continuous monitoring of every copy's success, proactive alerts, a monthly health report and on-demand recoveries. Your team touches nothing.
Coverage · Recovery
Full Microsoft 365, recoverable in detail
We protect the whole Microsoft 365 stack (Exchange, SharePoint, OneDrive, Teams and Groups) with granular recovery per app, from a single email to the full tenant.
Exchange Online
- From a single email to a full mailbox, including shared mailboxes, with export and cross-user migration
SharePoint Online
- From one file to a full site, with cross-site restore
OneDrive for Business
- From one file to a full drive, with cross-drive restore
Teams & Groups
- Conversations, files, notebooks, Planner and group calendars
Contacts, calendars & tasks
- Restore of calendars, events, contacts and tasks
Credentials
What sets this BaaS apart
VMCE
Veeam Registered Service Provider
Veeam Certified Engineers on staff. Veeam Data Cloud is the platform for Menshen's Microsoft 365 BaaS.
24
years protecting data in Angola
Critical data for Angola's largest enterprises protected for more than two decades. Banking, oil & gas, public sector.
Azure
Storage with data residency
Stored in Microsoft Azure, in a data region of your choice, with immutable copies. EU residency available for those who require it.
FAQ
Frequently asked questions
-
Doesn't Microsoft 365 come with backup?
No. Microsoft is responsible for platform availability (high availability, Microsoft-side disaster recovery, geographic replication), not for protecting the content of your data against accidental deletion, malicious deletion, SaaS ransomware attacks, or retention configuration errors. Microsoft Services Agreement Section 6B is explicit: Microsoft recommends you keep backups. -
How much does it cost?
Three editions, all on a fixed monthly fee per user: Foundation (Microsoft 365 backup), Advanced (adds Entra ID backup and threat detection) and Premium (adds disaster recovery and ransomware recovery). The per-user fee is provided in a proposal, sized to your user count. Talk to us for the current figure. -
What's included in the price?
Unlimited storage, unlimited retention, automated continuous backup, and granular recovery whenever needed. In the managed service this adds monitoring by the Menshen team, alerts and a monthly health report. No ingestion fees. -
How fast can we recover data?
Individual files: typically in seconds. Full mailbox: typically in minutes. Full tenant (extreme scenario): depends on volume, escalated as P1 with a dedicated SLA. -
Where is the data stored?
In Microsoft Azure regions of your choice (EU residency available), with immutable copies isolated from the tenant. AES-256 encryption in transit and at rest. For clients with Angolan data-sovereignty requirements, we discuss alternative options during the assessment phase. -
Can we be 100% certain we'll always recover?
No backup system offers absolute certainty. The Menshen BaaS service applies a 3-2-1 architecture, automated backup verification, continuous monitoring and monthly reports. This significantly reduces the risk of being unable to recover, but zero risk doesn't exist. The model is structured to minimise the probability of failure and maximise the probability of successful recovery.
Next step
Protect your Microsoft 365
We talk through your tenant, user count, retention and compliance requirements, and send a proposal with a fixed monthly fee.
Request Proposal
Write to us with your organisation's name and what you need. The team responds promptly.
Email info@menshen.netOr call +244 929 887 838+244 912 500 961