Complete Microsoft 365 recovery. Not just the mailboxes.
Most backups stop at mail and files. Kapsul8 also backs up calendars, contacts, in-place archives, Microsoft 365 Groups and SharePoint lists — and restores at the item level, three ways: side-by-side into a staging folder, in place, or an exact-state revert on the source mailbox that erases what an attacker added. Teams chats and Planner are captured too, browsable and eDiscovery-exportable rather than restored back into Teams. Agentless, encrypted with the tenant's own key, and logged in a tamper-evident audit chain, ZAR-billed and SA-resident.
04:00
04:00
04:00
04:00
12:10
04:00
From consent to protected in three steps.
No installers, no per-user setup, no passwords stored. The connection is a Microsoft admin-consent flow.
An admin approves the Microsoft consent screen. Kapsul8 talks to the tenant through Microsoft Graph from that moment on.
Exchange, OneDrive, SharePoint, Teams, protect all four or start where the risk is.
One full baseline backup, then delta sync forever: only changed data moves, on schedule, without touching users.
The whole tenant, not just the mailboxes.
Mail, calendar, contacts, and the online (in-place) archive mailbox, all delta-synced. Restore a single item, a folder, or the whole mailbox to any retained point in time.
Per-user drive backup with file version history and item permissions. Restore a file, a specific retained version, or a whole drive.
Document libraries, custom lists, site pages and subsites, kept in structure with permissions. Restore an individual document or list item.
Channel files restore in full through their SharePoint location. Channel messages restore as a provenance-noted re-post: the original author, timestamp and message text are preserved as an annotation, but native threading, reactions and inline attachments can’t be rewritten into Teams history — a Microsoft Graph limit. 1:1, group and meeting chats plus Planner are captured, browsable and eDiscovery-exportable — not restored back into Teams, since Microsoft Graph’s app-only API can’t re-post historical chat history and Planner writes are Microsoft-restricted. Microsoft 365 Groups conversations are captured as well. Chats hosted in another organisation’s tenant (external meeting threads) can’t be captured by a tenant-scoped connector — those are reported honestly, never silently skipped.
Three ways to restore. Three places to land it. Any retained restore point.
The same granular recovery for every workload — down to a single calendar event, contact, archived message, Group conversation or SharePoint list item, not just mailboxes and files.
Restored items land in a clearly labelled staging folder. Nothing live is touched — the safe default when you are not certain what the live state should be.
Items merge back where they came from, additively: re-creates what is missing, leaves what is present. Approval-gated because it writes to live mailboxes.
Rolls a mailbox back to a chosen point and removes what was added after it — the mode for undoing a compromise. Blocked while a legal hold is in force; soft-deletes, never shreds.
In place, side-by-side into a staging folder, or cross-user and cross-tenant restore
Restore points as often as every four hours, retained up to seven years
Approval-gated · blocked under an active legal hold
Three calls every MSP knows. Three quiet endings.
A mail item was hard-deleted weeks ago, the recycle bin has long moved on.
Open the snapshot timeline, pick the day it still existed.
That one item restored to the mailbox. Nothing else touched.
A OneDrive file was saved over, the good version no longer exists in the live tenant.
Browse the file’s retained version history in the backup.
The exact version, back in place.
A user leaves. The license is freed, but their history can’t just disappear.
The seat moves to Archived at 50% of the active rate, with no add-on billing.
Everything stays restorable for the full retention period, or under legal hold.
Why the storage bill stays small.
Two mechanics compound. Delta sync means only changed data ever moves after the baseline, and the cursor persists, so throttling or an outage never forces a restart. Content-addressable storage means identical files across users are stored exactly once. On real-world tenants that lands at 40–60% less storage than the raw estate.
Deduplicated once, then encrypted, dedup happens before per-tenant encryption, so savings never come at the cost of isolation.
Ransomware can’t delete what it can’t touch.
Your managed backups live outside your Microsoft tenant — on independent storage your Microsoft administrators hold no keys to — written to write-once storage governed by S3 Object Lock in compliance mode. An attacker who steals Microsoft admin credentials can encrypt or wipe what’s inside your tenant, but has no path to reach, alter or delete the copy Kapsul8 holds. Under compliance-mode Object Lock, a locked restore point can’t be changed or deleted by anyone — a rogue insider, or even VaultFuzion — until the retention period you set lawfully expires. Microsoft’s own native backup is append-only rather than deletion-proof, and stays inside your tenant’s Microsoft data boundary and geo. Kapsul8 keeps a separate copy you control, in write-once storage, for the full retention period you set.
Microsoft native-backup behaviour verified against Microsoft documentation on 04/09/2026; Microsoft revises these capabilities regularly.
Every snapshot arrives ready for scrutiny.
Each client encrypted with its own key, cryptographic isolation, not a shared vault.
Every backup, restore, and retention action lands on a tamper-evident audit ledger.
Configurable from 30 days to 7 years, with automatic disposition when periods lapse.
Cryptographic proof of disposal when retention ends, not just a deletion log line.
Priced per seat. The rate falls as you grow.
Starter R29.99, Growth R22.99, Scale R14.99, Volume R11.99, Enterprise custom. Identical product in every band; the seat count you commit to sets the rate. Seats that go inactive archive at half the active rate instead of billing full price forever.
Frequently asked questions.
Point it at a tenant and watch the first baseline land.
Tell us about your MSP and we will configure your tenant and partner-portal access within one business day.