Granular Recovery Services — restore specific files and emails quickly

Granular recovery services let you restore a single file, mailbox item or OneDrive document without rebuilding an entire system; tools such as Microsoft 365 native recovery or third‑party solutions (for example Veeam) can recover one item at a time, saving time and reducing disruption.

Many UK small and medium firms treat backups like a single switch: if something breaks they plan for a full restore. That usually means long downtime and lost billable hours. Instead, think in terms of retrieving the precise item — an individual invoice, a deleted email or a single SharePoint document — so normal work can continue while any wider recovery runs in the background.

Action 1 — pick the right scope and test it

Decide which systems need granular restores and prove they work before you need them. Start by listing the three categories of data that will cause most business disruption if unavailable: (1) customer invoices and contracts, (2) email and calendar items, and (3) collaborative files (OneDrive/SharePoint). For each category choose whether you need per‑item, per‑mailbox or per‑version restores.

Then validate those choices with simple tests. Run two planned restores per year for each critical category: one test that restores one item (an email or a single file) and one that restores a larger set (a whole mailbox or document library). Record how long each test takes and who must be involved. A realistic test will show whether your backup retention and indexing are usable in production.

• What to test: individual file restore, single mailbox item, and file version recovery.
• Who to involve: a system admin, a power user from operations, and someone from the team that owns the data.
• Success criteria: item is accessible to the end user within an agreed time window and integrity checks pass.

Use your findings to set an internal recovery SLA: for example, restore single items within an agreed window. Document this SLA and include it in your incident playbooks. If you rely on Microsoft 365 native tools for basic restores, confirm limits and behaviours in your tenancy; for higher control, consider a specialist product and validate on‑site or in your cloud tenant.

Action 2 — fit the tool to the problem and control costs

Granular recovery is a capability, not a product; match tool features to the problems you actually face. Key features to prioritise are searchable indexes, per‑item retention, immutable snapshots for ransomware, and legal‑hold support. Ask suppliers for demos that reproduce the three test scenarios you recorded earlier.

Cost control is critical: many vendors price by data volume, number of users or the frequency of point‑in‑time snapshots. Map vendor pricing to the business impact: if a single lost invoice costs you five hours of staff time and client goodwill, the incremental cost of per‑item recovery is often justified. Use the internal anchor below to check your broader backup posture as you compare vendors.

Practical checklist when evaluating a supplier:

1. Can they restore a single mailbox item or file without a full restore?
2. Do restores preserve metadata (timestamps, authorship)?
3. Is search fast and accurate enough to find items by keyword or user?
4. Are retention and legal‑hold granular rather than tenancy‑wide?

Also verify operational controls: who can trigger a granular restore, how requests are authorised, and how restores are logged for audit. If you use in‑house IT, ensure runbooks exist and are practised. If outsourcing, insist on a short RTO for single‑item restores and on test evidence.

For checklist and backup basics, review data backup options and responsibilities so your granular capability sits inside a resilient backup strategy. If you want official guidance on backups and resilience, consult the NCSC’s advice on backups NCSC’s guidance on cyber advice and guidance.

Final practical step: schedule a single‑item restore test this quarter, log the outcome, and set a clear SLA for those restores. That small change buys you immediate reductions in downtime and a more defensible position if something goes wrong.

Related reading

• our data backup for business guide
• Cloud data backup for business: a practical guide for UK SMEs
• Bare Metal Recovery — What It Is and When to Use It
• Managed backup services UK: a practical guide for growing businesses
• Offsite cloud backup for business — a practical guide for UK SMEs

FAQ

Can I recover a single deleted email from Microsoft 365?

Yes — Microsoft 365 supports item‑level recovery from mailboxes and the recycle bin if retention and licence levels permit; confirm your tenant’s retention settings and test a recovery to verify it works for your needs.

How long does a granular restore typically take?

Times vary, but many organisations can recover a single file or email within a few minutes to a few hours; larger or cross‑site restores may take longer and should be covered by your internal SLA (aim to define a target such as under 24 hours).

Will granular restores help after a ransomware attack?

Yes — per‑item and immutable snapshot features let you retrieve unencrypted copies of specific files or emails while a full forensic or rebuild effort continues; ensure your supplier supports immutability and tested recovery from those snapshots.

How much does granular recovery cost roughly?

Pricing models differ: expect to pay either per‑user, per‑TB, or a flat subscription; small firms often see entry costs from a few hundred to a few thousand pounds a year depending on retention and scope, so map vendor quotes to the value of reduced downtime.