Microsoft's Shared Responsibility Model explicitly states that data protection is the customer's responsibility. Grovia Vault creates an independent, encrypted, air-gapped copy of your entire M365 estate.
Microsoft operates a world-class infrastructure. But infrastructure uptime is not the same as data protection. The responsibility for your data sits with you.
Every workload in your M365 tenant, backed up independently and restorable to any point in time.
Your email is often your most business-critical data. Grovia Vault backs up all mailboxes, sent items, drafts, calendar events, and contacts. Restore a single email, a folder, or an entire mailbox to any point in time. Ideal for recovering from accidental deletion, litigation holds, and compliance audits.
SharePoint is the document backbone of many organisations — contracts, policies, project files, and knowledge bases. Grovia Vault backs up all site collections, document libraries, lists, and pages. Restore a single document version, a library, or an entire site to a previous state — even after complete deletion.
OneDrive sync creates a dangerous attack surface: if a device is hit by ransomware, the encrypted files sync to OneDrive and propagate to all connected devices. Grovia Vault maintains an independent, pre-ransomware snapshot of every OneDrive you protect, enabling clean restoration without paying a ransom.
Teams data is scattered across Exchange, SharePoint, and OneDrive under the hood. Grovia Vault consolidates all Teams data — channel messages, chat history, meeting recordings, and attached files — into a single restorable backup. Essential for organisations where Teams is the primary communication and collaboration tool.
M365 backup uses Microsoft's Graph API with delegated permissions. No passwords stored. No agents installed on Microsoft servers.
Click "Connect Microsoft 365" in the Grovia Vault dashboard. You're redirected to Microsoft to sign in and approve the required Graph API permissions. Grovia stores only the OAuth refresh token — never your password.
Choose which mailboxes, sites, drives, and Teams to protect. Set the sync frequency (minimum hourly), retention period, and which workloads to prioritise for the initial full sync.
Grovia's M365 sync service polls the Microsoft Graph API, downloads changed items, compresses and encrypts them with AES-256-GCM, and stores them in your Wasabi → B2 → S3 pipeline.
Browse the backup history, find the item or snapshot you need, and restore directly to the user's mailbox, OneDrive, or SharePoint — or download the decrypted file directly.
Microsoft 365 backup is included in Business and Enterprise plans. Connect your tenant in under 5 minutes.