Long-form write-ups of the architectural decisions behind each shipped release, what we built, why we chose one approach over another, and what happened when it met production traffic. New articles land here after the release they describe is live.
Immutability protects a record during its lawful life. Section 14 ends that life on schedule — with proof.
Calendars, contacts, archives, chats, Groups, Planner, lists — the parts you only miss during a restore
A directory is a graph, not a user list — and a restore has to put the relationships back
Side-by-side, in-place, and the destructive revert — plus the honest physics of point-in-time
Audit logs are not evidence. The difference between the two is a cryptographic chain, a legally-operative custodian record, and a destruction record that is itself audit-chained and independently verifiable.
Compliance scores have a problem: a number on its own does not tell you whether you are above or below the line. A letter does.
Where Microsoft's built-in retention stops, what falls through the gap, and what an MSP actually needs to defend a POPIA Section 22 event.
Whole-mailbox restore is the disaster-recovery answer to a granular problem. The threats most MSPs face in 2026 need a different unit of recovery.
Microsoft Entra Conditional Access is a power tool with a sharp edge. Production is the wrong place to learn how the edge works.
Defender's identity protection covers the basics. The advanced patterns, token replay, brute-force-at-scale, federated-domain spoofing, need a layer above.
USD-denominated SaaS, 15% VAT, R/USD volatility, plus the "global" premium. The real M365 backup bill for a SA MSP rarely matches the marketing landing page.
Identity threat detection, drift, license analytics, conditional-access What-If. The global price is broken; SA-resident pricing is roughly a third of that.
POPIA Section 72, where master keys actually live, and what data residency means when the regulator asks for proof.
Microsoft's native Entra Backup and Recovery covers a useful baseline. There is still a gap above that baseline, drift, simulation, cross-tenant operations, identity threat correlation, that an MSP at scale has to fill some other way.
Stack consolidation is sold as cost savings. Sometimes that is true. Sometimes it is a lock-in trade dressed as a discount. The honest answer requires per-seat math, committed-seat disclosure, and a clear view of where integration boundaries actually break.
