VaultFuzionVaultFuzionBY KAPARDYN
Kapsul8 M365 Backup · Available now

Microsoft 365 backup with a legally defensible audit trail.

Agentless, delta-first backup for Exchange, OneDrive, SharePoint, and Teams. Every snapshot deduplicated, encrypted with the tenant's own key, and logged in a tamper-evident audit chain — one engine, one console, one ZAR invoice.

Delta stream · one tenantAgentless
MON
04:00
FULL BASELINE
TUE
04:00
DELTA
WED
04:00
DELTA
THU
04:00
DELTA
THU
12:10
DELTA · RESUMED AFTER THROTTLE
FRI
04:00
DELTA
CURSOR PERSISTED · NEVER RESTARTS● ONLY CHANGES MOVE
Zero-agent onboarding

From consent to protected in three steps.

No installers, no per-user setup, no passwords stored — the connection is a Microsoft admin-consent flow.

Connect
01

An admin approves the Microsoft consent screen. Kapsul8 talks to the tenant through Microsoft Graph from that moment on.

Choose workloads
02

Exchange, OneDrive, SharePoint, Teams — protect all four or start where the risk is.

Baseline, then deltas
03

One full baseline backup, then delta sync forever: only changed data moves, on schedule, without touching users.

Four workloads

The whole tenant — not just the mailboxes.

Exchange Online
Full mailboxesDelta syncItem-level

Full mailbox backup with delta sync. Restore an individual mail item or the whole mailbox — to any retained point in time.

OneDrive for Business
Personal drivesShared drivesVersion history

Per-user drive backup with file version history. Granular file restore from any retained version.

SharePoint Online
DocumentsListsPermissionsMetadata

Site-collection backup that keeps structure intact — documents, lists, permissions, metadata. Selective restore down to the sub-site.

Microsoft Teams
ChannelsFilesTabsTranscripts

Channel messages, files, tabs, and meeting transcripts — private and shared channels included. Point-in-time recovery through approval-based workflows.

When the call comes

Three calls every MSP knows. Three quiet endings.

The deleted board email
Incident

A mail item was hard-deleted weeks ago — the recycle bin has long moved on.

Action

Open the snapshot timeline, pick the day it still existed.

Back

That one item restored to the mailbox. Nothing else touched.

The overwritten proposal
Incident

A OneDrive file was saved over — the good version no longer exists in the live tenant.

Action

Browse the file’s retained version history in the backup.

Back

The exact version, back in place.

The employee who left
Incident

A user leaves. The license is freed — but their history can’t just disappear.

Action

The seat moves to Archived at 50% of the active rate, with no add-on billing.

Back

Everything stays restorable for the full retention period — or under legal hold.

Built-in storage economics

Why the storage bill stays small.

Two mechanics compound. Delta sync means only changed data ever moves after the baseline — and the cursor persists, so throttling or an outage never forces a restart. Content-addressable storage means identical files across users are stored exactly once. On real-world tenants that lands at 40–60% less storage than the raw estate.

Typical footprint
Raw tenant estate100%
Stored by Kapsul840–60% less

Deduplicated once, then encrypted — dedup happens before per-tenant encryption, so savings never come at the cost of isolation.

Evidence-grade by default

Every snapshot arrives ready for scrutiny.

Per-tenant AES-256

Each client encrypted with its own key — cryptographic isolation, not a shared vault.

SHA-256 hash chain

Every backup, restore, and retention action lands on a tamper-evident audit ledger.

POPIA retention

Configurable from 30 days to 7 years, with automatic disposition when periods lapse.

Destruction certificates

Cryptographic proof of disposal when retention ends — not just a deletion log line.

4
Workloads from one engine
Δ
Delta-only after the first full backup
40–60%
Typical storage savings
7 yr
Maximum retention
50%
Archived-seat rate when users leave
Pricing

In every VaultFuzion tier. Priced per seat.

Starter, Backup Pro, Pro-Heavy, Fortress — M365 Backup ships in all of them. Seats that go inactive archive at half the active rate instead of billing full price forever.

FAQ

Frequently asked questions.

Microsoft keeps the service running — but recovering your content from deletion, overwrite, or a departed employee is your responsibility, and the built-in recycle bins and retention windows are operational conveniences, not evidence-grade backup. Kapsul8 gives you independent snapshots, retention up to 7 years, and an audit trail that stands on its own.

A single mail item or a whole mailbox on Exchange; any retained file version on OneDrive; a sub-site, list, or document on SharePoint; channel messages, files, tabs, and transcripts on Teams — all point-in-time, through approval-based restore workflows.

One full baseline, then delta-only forever: after the first backup, only changed data moves. The sync cursor is persisted, so Graph API throttling or an outage pauses the stream instead of restarting it. Users never see or feel any of it — there are no agents.

Their seat transitions to Archived at 50% of the active per-seat price, with no add-on billing. All historical backup data stays restorable for the configured retention period — and indefinitely under an active legal hold.

South African object storage by default, or your own S3-compatible bucket with BYOS. Every tenant is encrypted with its own AES-256 key, so no client can ever read another’s data — and every access lands on the hash-chained audit ledger.

Also under Kapsul8
The machines need backup too.

Kapsul8 EndpointBackup covers Windows desktops, laptops, and servers — file, image, system state, and bare-metal recovery, priced per endpoint in ZAR.

Explore EndpointBackup

Point it at a tenant and watch the first baseline land.

Tell us about your MSP and we will configure your tenant and partner-portal access within one business day.