Data Protection Centre/Microsoft 365/Retention Policy vs. Litigation Hold vs. Archiving in Exchange Online

Categories

In this article

  • Retention policies and labels
  • Litigation holds
  • Archiving
  • Retention policy vs. litigation hold vs. archiving
  • Best practices for Exchange Online retention
  • Frequently asked questions

Retention Policy vs. Litigation Hold vs. Archiving in Exchange Online

11 Apr 2025
8 min read
Ragavarshini

Article at a glance

Microsoft 365’s retention policies, litigation hold, and archiving features are essential but come with limitations that could result in data loss.
  • Retention policies help ensure data is retained or deleted according to compliance needs but require careful configuration and scoping to avoid gaps. 

  • Litigation Holds are primarily legal tools designed to preserve data in its original state during investigations or lawsuits, not for routine data recovery or backup. 

Read more

‘Archiving’, ‘retention policies’, and ‘litigation holds’ are different terms related to Exchange Online data retention, and administrators should be aware of when to use what.
In this article, we discuss in detail how retention policies, litigation holds, and archive mailboxes are different from each other, and explain how they should be used.

Retention policies and labels

 Retention policies and labels in Microsoft 365 are essential tools to manage business information, meet regulatory compliance requirements, and reduce the risk of data loss. These features are part of a broader information governance strategy that spans various data types including Exchange Online mailboxes, Microsoft Teams chats, SharePoint sites, and OneDrive accounts. 

Retention policies are created in the Microsoft Purview Compliance Portal and can be applied organization-wide or scoped to specific users, groups, or locations. Admins can define whether content should be retained, deleted, or retained for a specific duration before deletion. Retention can be triggered based on content creation, modification, labeling, or event-based conditions. 

Retention labels can be applied manually by users or automatically based on specific conditions such as content type, keywords, or sensitive information. Labels can also classify content as records to prevent changes or deletion. 

Note: Microsoft uses the term ‘retention policies’ in various contexts. In this article, retention policies and labels refer to the new Microsoft 365 retention policy features available in the Compliance Center.

To know more about Microsoft 365 retention policies and labels, click here

Litigation holds

Litigation Hold in Microsoft 365 allows administrators to preserve all mailbox content, including deleted items and original versions of modified items, for compliance and legal investigations. As an eDiscovery feature in Exchange Online, it applies to both the user's primary and archive mailboxes (if enabled). Litigation Holds must be manually applied to individual mailboxes and can be configured for a specific duration or set to retain content indefinitely. When enabled, deleted and modified items are retained in the Recoverable Items folder, whose storage quota increases to accommodate the preserved data.

Click here to know more about litigation holds in Microsoft 365.

Archiving

In Microsoft 365, archive mailboxes refer to the additional mailbox storage space provided to users.
The primary intent for using archive mailboxes is for users to move data that they no longer use currently to a secondary mailbox. This helps save storage costs associated with the primary mailboxes.

After the archive mailbox is enabled, up to 100 GB of additional storage is available per user. Once the limit is reached, users can make use of a feature called auto-expanding archiving (also called unlimited archiving) that provides additional storage in the archive without contacting Microsoft. However, there is a limit of 1.5 TB to the auto-expanded archive.

For step-by-step instructions on how to turn on auto-expanding archiving, click here.

To understand unlimited archiving in detail, click here.

Retention policy vs. litigation hold vs. archiving

Here is a comprehensive table explaining the differences between retention policy, litigation hold, and archiving.
Retention policy vs. litigation hold vs. archiving
Retention policyLitigation holdArchiving

Use case

Retention policies are used to protect valuable data from data loss events such as accidental deletion and unwanted information is deleted. 
Litigation hold is an eDiscovery feature that is helpful in preserving data for legal compliance. eDiscovery is the process of identifying and collecting Electronically Stored Information to be presented as evidence in any legal proceeding. 
Archive mailboxes act as a secondary mailbox that can be used to save up on storage costs on mailbox items that are no longer actively used.

License requirement

Retention policies and labels are only available in the advanced E3 and E5 editions of Microsoft 365.
Litigation hold is available in the advanced E3 and E5 editions of Microsoft 365.
Archive mailboxes are available to all organizations that have an Exchange Online license.

Feature access

Retention label settings are available under 'Information Governance' within the Compliance Center. 
Litigation hold is available under the eDiscovery section within the Microsoft 365 Compliance Center. 

Archive mailbox settings are available under 'MRM', in the Classic Exchange Admin Center.

Show more

 

Best practices for Exchange Online retention

  • To implement effective data retention methods, first classify all organization data into three retention scenarios:

    a. Retain only: Items that have to preserved for legal compliance and should never be deleted.

    b. Retain and then delete: Items that must be retained for a specific period of time before deletion as they bring business value.

    c. Delete only: Items that need not be retained and must be destroyed.

  • For an effective retention strategy, use a combination of Messaging Records Management (MRM) and Microsoft 365 retention policies. Microsoft recommends using MRM for your archiving needs and retention policies for your retention requirements. To learn more on how to create retention policies or move messages to the archive, click here.

  • The default retention for mailbox items in the Recoverable Items folder is 14 days. However, you can choose to extend it up to 30 days. This feature is available only through PowerShell. To learn how to change the retention period for permanently deleted items in an Exchange Online mailbox, click here

  • While Microsoft 365 provides native retention features to help manage data lifecycle and compliance, these tools are not designed to function as full-fledged backup solutions. 

    According to Microsoft’s own terms, they are not liable for any data loss or disruption, and in the event of an outage, access to your stored content may be compromised. As a best practice, organizations should regularly back up their data using trusted third-party solutions.  

    To ensure complete protection of Exchange Online data, use a combination of Microsoft’s built-in capabilities and a reliable backup solution like SysCloud

Reasons to backup Exchange Online with SysCloud:

  • Limitations of native retention settings: The native retention settings offered by Microsoft are not designed to function as full-fledged backup and recovery solutions. Having an independent backup of your data stored off-site is an effective bulwark against data loss incidents.

  • Easy restoration: Third party tools such as SysCloud, help you easily restore specific or all emails in just a few clicks.

  • Save license costs: Third-party solutions allow you to retain safe copies of organizational data even after employee exits and account deletions, thus saving license costs.

  • User-Friendly Interface: With simple GUIs, no technical or coding expertise is required to backup and restore data.

  • Fast backups: Take faster backup even for large teams.

  • Protection against ransomware and phishing: Cloud security concerns have sky-rocketed in the pandemic. Tools like SysCloud secures data being backed up from ransomware and phishing.

  • Backup Granularity: Microsoft 365 Backup offers specific retention periods and recovery points. For Exchange Online, it provides 10-minute recovery points for the trailing two weeks and weekly snapshots for up to 52 weeks prior. However, these settings are not currently variable or modifiable.

Frequently asked questions

  • What is the default retention of Office 365 Exchange Online and archive mailbox?

    If a mailbox item is deleted in Microsoft 365, it is retained in the deleted items folder for 30 days, after which it moves to the Recoverable Items folder. For a detailed illustration on what happens when data is deleted in Exchange Online, click here.

    Items in the archive mailbox if deleted, are lost forever.

  • When you archive an email does it reduce the size of the mailbox?

    Archiving mails help reduce storage space of the primary mailbox. However, there are limits to the archive mailbox as well. For more information, click here.

  • What happens to emails after retention policy?

    Once the retention period has expired, the mailbox items either get deleted, or moved to the archive, or triggers a disposition review for the administrator to review. The action taken depends on the option chosen at the time of retention policy creation.

Learn more about Exchange Online Backup and Recovery with SysCloud

Discover how SysCloud simplifies data protection for Exchange Online with automated backups, effortless recovery, and complete peace of mind.

Get actionable SaaS administration insights

We don’t spam. Unsubscribe anytime.

In this article

  • Retention policies and labels
  • Litigation holds
  • Archiving
  • Retention policy vs. litigation hold vs. archiving
  • Best practices for Exchange Online retention
  • Frequently asked questions

Start enjoying faster and easier backups, today

Avoid costly data retention gaps and minimize time to recovery with SysCloud's cloud backup.Start 30-Day Free Trial
Certifications
Certifications