Kapsul8 M365 · Complete Recovery

Complete Microsoft 365 recovery. Not just the mailboxes.

Most backups stop at mail and files. Kapsul8 also backs up calendars, contacts, in-place archives, Microsoft 365 Groups and SharePoint lists — and restores at the item level, three ways: side-by-side into a staging folder, in place, or an exact-state revert on the source mailbox that erases what an attacker added. Teams chats and Planner are captured too, browsable and eDiscovery-exportable rather than restored back into Teams. Agentless, encrypted with the tenant's own key, and logged in a tamper-evident audit chain, ZAR-billed and SA-resident.

Delta stream · one tenantAgentless
MON
04:00
FULL BASELINE
TUE
04:00
DELTA
WED
04:00
DELTA
THU
04:00
DELTA
THU
12:10
DELTA · RESUMED AFTER THROTTLE
FRI
04:00
DELTA
CURSOR PERSISTED · NEVER RESTARTS● ONLY CHANGES MOVE
Zero-agent onboarding

From consent to protected in three steps.

No installers, no per-user setup, no passwords stored. The connection is a Microsoft admin-consent flow.

Connect
01

An admin approves the Microsoft consent screen. Kapsul8 talks to the tenant through Microsoft Graph from that moment on.

Choose workloads
02

Exchange, OneDrive, SharePoint, Teams, protect all four or start where the risk is.

Baseline, then deltas
03

One full baseline backup, then delta sync forever: only changed data moves, on schedule, without touching users.

Four workloads

The whole tenant, not just the mailboxes.

Exchange Online
MailCalendarContactsIn-place archiveDelta sync

Mail, calendar, contacts, and the online (in-place) archive mailbox, all delta-synced. Restore a single item, a folder, or the whole mailbox to any retained point in time.

OneDrive for Business
FilesVersion historyPermissions

Per-user drive backup with file version history and item permissions. Restore a file, a specific retained version, or a whole drive.

SharePoint Online
Document librariesListsPagesSubsitesPermissions

Document libraries, custom lists, site pages and subsites, kept in structure with permissions. Restore an individual document or list item.

Teams & Microsoft 365 Groups
ChannelsMessagesFilesChatsGroup conversationsPlanner

Channel files restore in full through their SharePoint location. Channel messages restore as a provenance-noted re-post: the original author, timestamp and message text are preserved as an annotation, but native threading, reactions and inline attachments can’t be rewritten into Teams history — a Microsoft Graph limit. 1:1, group and meeting chats plus Planner are captured, browsable and eDiscovery-exportable — not restored back into Teams, since Microsoft Graph’s app-only API can’t re-post historical chat history and Planner writes are Microsoft-restricted. Microsoft 365 Groups conversations are captured as well. Chats hosted in another organisation’s tenant (external meeting threads) can’t be captured by a tenant-scoped connector — those are reported honestly, never silently skipped.

Complete recovery

Three ways to restore. Three places to land it. Any retained restore point.

The same granular recovery for every workload — down to a single calendar event, contact, archived message, Group conversation or SharePoint list item, not just mailboxes and files.

Side-by-side

Restored items land in a clearly labelled staging folder. Nothing live is touched — the safe default when you are not certain what the live state should be.

In place

Items merge back where they came from, additively: re-creates what is missing, leaves what is present. Approval-gated because it writes to live mailboxes.

Exact-state revert

Rolls a mailbox back to a chosen point and removes what was added after it — the mode for undoing a compromise. Blocked while a legal hold is in force; soft-deletes, never shreds.

Restore target

In place, side-by-side into a staging folder, or cross-user and cross-tenant restore

Point in time

Restore points as often as every four hours, retained up to seven years

Guardrails

Approval-gated · blocked under an active legal hold

When the call comes

Three calls every MSP knows. Three quiet endings.

The deleted board email
Incident

A mail item was hard-deleted weeks ago, the recycle bin has long moved on.

Action

Open the snapshot timeline, pick the day it still existed.

Back

That one item restored to the mailbox. Nothing else touched.

The overwritten proposal
Incident

A OneDrive file was saved over, the good version no longer exists in the live tenant.

Action

Browse the file’s retained version history in the backup.

Back

The exact version, back in place.

The employee who left
Incident

A user leaves. The license is freed, but their history can’t just disappear.

Action

The seat moves to Archived at 50% of the active rate, with no add-on billing.

Back

Everything stays restorable for the full retention period, or under legal hold.

Built-in storage economics

Why the storage bill stays small.

Two mechanics compound. Delta sync means only changed data ever moves after the baseline, and the cursor persists, so throttling or an outage never forces a restart. Content-addressable storage means identical files across users are stored exactly once. On real-world tenants that lands at 40–60% less storage than the raw estate.

Typical footprint
Raw tenant estate100%
Stored by Kapsul840–60% less

Deduplicated once, then encrypted, dedup happens before per-tenant encryption, so savings never come at the cost of isolation.

Immutable storage by default

Ransomware can’t delete what it can’t touch.

Your managed backups live outside your Microsoft tenant — on independent storage your Microsoft administrators hold no keys to — written to write-once storage governed by S3 Object Lock in compliance mode. An attacker who steals Microsoft admin credentials can encrypt or wipe what’s inside your tenant, but has no path to reach, alter or delete the copy Kapsul8 holds. Under compliance-mode Object Lock, a locked restore point can’t be changed or deleted by anyone — a rogue insider, or even VaultFuzion — until the retention period you set lawfully expires. Microsoft’s own native backup is append-only rather than deletion-proof, and stays inside your tenant’s Microsoft data boundary and geo. Kapsul8 keeps a separate copy you control, in write-once storage, for the full retention period you set.

Microsoft native-backup behaviour verified against Microsoft documentation on 04/09/2026; Microsoft revises these capabilities regularly.

Evidence-grade by default

Every snapshot arrives ready for scrutiny.

Per-tenant AES-256

Each client encrypted with its own key, cryptographic isolation, not a shared vault.

SHA-256 hash chain

Every backup, restore, and retention action lands on a tamper-evident audit ledger.

POPIA retention

Configurable from 30 days to 7 years, with automatic disposition when periods lapse.

Destruction certificates

Cryptographic proof of disposal when retention ends, not just a deletion log line.

4
Workloads from one engine
Δ
Delta-only after the first full backup
40–60%
Typical storage savings
7 yr
Maximum retention
50%
Archived-seat rate when users leave
Pricing

Priced per seat. The rate falls as you grow.

Starter R29.99, Growth R22.99, Scale R14.99, Volume R11.99, Enterprise custom. Identical product in every band; the seat count you commit to sets the rate. Seats that go inactive archive at half the active rate instead of billing full price forever.

FAQ

Frequently asked questions.

Microsoft keeps the service running, but recovering your content from deletion, overwrite, or a departed employee is your responsibility, and the built-in recycle bins and retention windows are operational conveniences, not evidence-grade backup. Kapsul8 gives you independent snapshots, retention up to 7 years, and an audit trail that stands on its own.

Item-level and up: a single mail item, folder, or whole mailbox; a calendar event, a contact, or the online archive; a OneDrive file or a specific retained version; a SharePoint list item; a Microsoft 365 Groups conversation. Every restore runs in one of three modes — side-by-side into a staging folder, in place, or an exact-state revert on the source mailbox that also removes what was added after the chosen point. All point-in-time, approval-gated, and blocked outright while a legal hold is in force.

One full baseline, then delta-only forever: after the first backup, only changed data moves. The sync cursor is persisted, so Graph API throttling or an outage pauses the stream instead of restarting it. Users never see or feel any of it, there are no agents.

Their seat transitions to Archived at 50% of the active per-seat price, with no add-on billing. All historical backup data stays restorable for the configured retention period, and indefinitely under an active legal hold.

South African object storage by default, or your own S3-compatible bucket with BYOS. Every tenant is encrypted with its own AES-256 key, so no client can ever read another’s data, and every access lands on the hash-chained audit ledger.

Also under Kapsul8
The machines need backup too.

Kapsul8 EndpointBackup covers Windows desktops, laptops, and servers, file, image, system state, and bare-metal recovery, priced per endpoint.

Explore EndpointBackup

Point it at a tenant and watch the first baseline land.

Tell us about your MSP and we will configure your tenant and partner-portal access within one business day.