Home›Guides›Microsoft 365 and Google Workspace

Microsoft 365 and Google Workspace

Backing up Google Workspace

Backing up Google Workspace means copying the valuable content of your Google domain outside it: Gmail, Calendar, Contacts, My Drive and shared drives. The domain can be fully redundant at Google and still lose a folder, because a user or an administrator destroyed it.

Updated October 20263 min read6 sources cited

Key points

  • Google’s safety nets are short: 30 days in the trash, then 25 days for restore by the administrator; 20 days to restore a deleted account.
  • Google says so itself: Vault is not designed to be a backup or archiving tool.
  • Include group mailboxes, generic accounts and shared drives.
  • Store outside Google, encrypted, with a period during which copies cannot be deleted, and run test restores.

What is in the domain, and what is not

Google takes care of the platform. The customer takes care of accounts, groups, sharing and rules. Vault, available depending on the edition, retains messages and files for legal discovery inside the domain. The Google Vault FAQ puts it bluntly: Vault is not designed to be a backup or archiving tool. It is not a copy you can take to another provider, nor a “put the Drive back as it was 40 days ago” button independent of the administrators.

The built-in safety nets are short:

SituationPeriod stated by GoogleAfterwards
Gmail message or Drive file in the trash30 daysPermanent deletion
Restore by the administrator after the trash25 more daysPurged, unrecoverable
User account deleted20 daysData lost

A backup starts where these safety nets end.

Order of implementation

  1. Count the accounts, shared drives and volume. Drive volume dominates the bill.
  2. Create tool access to the domain, as narrow as possible, protected by multi-factor authentication for the administrator.
  3. Include group mailboxes and generic accounts, not just individuals.
  4. Set a frequency (at least daily) and a retention period (30 to 90 days, unless there is a reason otherwise).
  5. Store outside Google, encrypted, with a period during which copies cannot be deleted. This is the cloud equivalent of the off-site copy recommended by CERT-MU and of the rule set out by the French cybersecurity agency (ANSSI): several distinct copies, on different media, one of them offline.
  6. Run a test restore of a mailbox and a shared drive folder, then repeat regularly: CERT-MU recommends regular tests, and ANSSI requires them to follow a written procedure.

Marketplace applications that store their data on their own side are not covered by this list. Identifying them avoids unpleasant surprises (a CRM connected to Google, an e-signature tool, etc.).

Common mistakes

  • Enabling Vault and ticking “backup” in an internal spreadsheet.
  • Backing up Gmail and forgetting shared drives, where the working documents are.
  • Deleting the account of an employee who has left without transferring their data, then exceeding the 20 days.
  • Relying on Drive for desktop sync as the only local copy: depending on the settings, it mirrors the cloud, destruction included.
  • Never restoring.

At WeDoBack

WeDoBack backs up Google Workspace in the same way as Microsoft 365 for email, calendars and contacts: one agent per address, storage on top (SMART or INTEGRAL), encryption before sending with a key held by the customer, copies outside the domain on servers dedicated to backup. Operational details are in Backing up business Gmail. Google Drive is covered as well: see Backing up business Google Drive for the method.

See offers and pricesRequest a quote

Frequently asked questions

Doesn’t Google Vault act as a backup?

No. The Google Vault FAQ states explicitly that Vault is not designed to be a backup or archiving tool. It retains and searches data for audits or litigation, inside the domain, according to rules set in advance.

What happens when an employee’s account is deleted?

The administrator can restore the account for 20 days after its deletion. After that, Google states that the data is gone and can no longer be restored. Transfer or back up whatever must be kept before deleting.

How long can an administrator recover a deleted email or file?

A message or file stays in the trash for 30 days. After that, the administrator still has 25 days to restore it from the Admin console. Once both periods have passed, Google purges it permanently.

Further reading

Microsoft 365 and Google WorkspaceShould you back up Google Workspace?IT backupHow to back up Google WorkspaceMicrosoft 365 and Google WorkspaceDoes Google Workspace really include a backup?IT backupHow to test that a backup works

Sources

Documents consulted in October 2026.

  1. Restore a user’s permanently deleted email — Google Workspace Admin Help
  2. Recover deleted files and folders for Drive users — Google Workspace Admin Help
  3. Restore a recently deleted user — Google Workspace Admin Help
  4. Google Vault FAQ — Google Vault Help
  5. Backing up information systems – The fundamentals (ANSSI-BP-100, v1.1, 27 November 2025, in French) — ANSSI (French cybersecurity agency)
  6. Offers and prices — WeDoBack

Planning a backup, DRP or BCP project?

More than 20 years of experience protecting business data.

Request a quote+33 9 72 50 78 28

Protect your data with WeDoBack

Encrypted offsite backup, immutable storage, DRP and BCP: tell us about your servers and we will recommend the right combination.

Request a quoteSee offers and prices