All of Microsoft 365,
None of the admin.
Licences, mailboxes, Teams, SharePoint, Copilot and security policy: set up properly, supported by people you can ring, and backed up independently of Microsoft.
Migration & setup review
Tenant monitoring
Independent backups
Support, no call centre
Tenant health · what we watch
All services healthyBuying licences is easy.
Running a tenant isn't.
Most businesses are on Microsoft 365 already. Very few are on it properly, and the gap shows up as wasted licences, weak security defaults and a mailbox nobody can recover.
A tenant nobody owns
Paying for people who left
Licences roll over every month for staff who went eighteen months ago, because nobody reviews the bill.
Default security, which isn't secure
No conditional access, MFA half-deployed, legacy sign-in still open and global admin shared around the office.
Microsoft does not back it up for you
Deleted items age out in 30 to 93 days. After that, an accidental delete or a ransomware sync is simply gone.
Files in four places at once
OneDrive, SharePoint, Teams and a legacy server, with three versions of the same document and no rule about which is right.
Support means a support portal
A web form, a ticket number and a 48-hour reply when nobody can send email this morning.
A tenant we look after
Licences reviewed, not renewed blindly
Right plan per user, unused seats removed, annual commitments used where they’re cheaper.
Security baseline applied properly
MFA everywhere, conditional access, least-privilege admin, legacy protocols closed and secure score tracked.
Independent daily backups
Mail, OneDrive, SharePoint and Teams backed up outside Microsoft, retained long-term, restores tested.
A structure people actually follow
Clear homes for documents, sensible Teams and permissions, sharing rules that don’t leak outside the business.
A Birmingham number that answers
Starters, leavers, password resets and deleted files, handled by people who know your setup.
Every part of the suite:
deployed, secured and supported.
Not just the apps your staff open, but the admin layer underneath that decides whether the whole thing is safe.
Outlook & Exchange
Mailboxes, shared mailboxes, distribution groups, signatures, mail flow rules and spam filtering.
Microsoft Teams
Team and channel structure, meetings, external guests, and Teams Phone where you want calls in one place.
SharePoint
Document libraries, sensible permissions, intranet sites and migration off ageing on-premise file servers.
OneDrive
Personal file sync set up correctly: Known Folder Move, offline access and no more documents living only on a laptop.
Copilot
Licensing, readiness and a data-access review first, so Copilot summarises what people should see rather than everything.
Word, Excel & PowerPoint
Deployment, templates, version control, co-authoring and training for staff who never had any.
Entra ID & access
Identity, single sign-on, MFA, conditional access, guest access, and starters and leavers handled the same way each time.
Intune & device management
Company laptops and phones enrolled, policy-managed, encrypted, and wipeable if one goes missing.
Defender for Office 365
Anti-phishing, safe links and attachments, alerting and quarantine review, configured beyond the defaults.
Planner, Lists & Project
Lightweight task and workflow tools set up for how your team actually runs jobs.
Power Automate & Forms
Simple automations for approvals, enquiry forms and repeated admin nobody should still be doing by hand.
365 Backup
Independent daily backup of mail, OneDrive, SharePoint and Teams, with long retention and tested restores.
What we actually do
with your tenant.
Eight workstreams, whether you’re moving to 365 for the first time or inheriting one that’s been drifting for years.
01
Deployment & migration
- Mail, files and users moved
- Out of hours, no downtime
- From Google, IMAP or on-premise
- Nothing left behind
02
Licensing & cost control
- Right plan per user
- Unused seats reclaimed
- Renewals managed
- One predictable bill
03
Security & compliance
- MFA & conditional access
- Least-privilege admin
- Secure score reviewed
- Data retention policy
04
Support & Documentation
- Day-to-day user support
- Starters & leavers
- Asset Register Updates
- Adoption, not just access
05
Copilot & AI readiness
- Data-access review first
- Pilot group and measurement
- Prompt training for staff
- Rollout when it's worth it
06
Integration & automation
- Line-of-business apps
- Single sign-on
- Workflow automation
- Tenant-to-tenant merges
Also
Backup & recovery
- Independent daily backups
- 12 month retention as standard
- Point-in-time restores
- Tested, not assumed
Always
Monitoring
- Service health watched
- Sign-in risk alerts
- Licence drift flagged
- ITDR Access Protection Option*
Take the whole lot, or just the parts you’re missing. Most clients start with a tenant review and go from there.
* For ITDR see our managed security services.
Microsoft hosts your data.
They don't back it up for you.
It’s the single most common misunderstanding we see, and it’s written plainly in Microsoft’s own shared responsibility model: they keep the service running, you’re responsible for your data in it.
The assumption
“It's in the cloud, so it's safe”
Native retention is a safety net for accidents you notice quickly, not a backup you can restore a business from.
- Deleted mail and files age out in 30 to 93 days
- A leaver's mailbox goes when the licence does
- Ransomware syncs happily into OneDrive
- Malicious or bulk deletion is replicated, not reversed
- No easy point-in-time restore of a whole site or Team
What we put in place
An independent copy, outside the tenant
A separate backup of everything in 365, held away from Microsoft, so a bad day is a restore rather than a reconstruction.
- Daily backup of Exchange, OneDrive, SharePoint & Teams
- Long-term retention, years rather than weeks
- Restore a single email, a folder, a site or a whole user
- Leavers' data kept after the licence is removed
- Restores tested on a schedule, not assumed to work
We also back up servers, PCs and websites: see IT support and website maintenance. Retention terms to be confirmed.
From first call to
fully managed.
Four stages, whether you’re migrating in or handing over a tenant you already have.
Understand the business, then the tenant
We look at how your people actually work, then audit what you have: licences, mailboxes, security settings, where files live and what's costing money for no reason.
- Tenant audit
- Licence review
- Written plan & costs
Moved over without a lost morning
Mail, files, Teams and users migrated out of hours from Google Workspace, IMAP or an on-premise server. Devices set up, Outlook profiles configured, and someone on site or on the phone the morning everyone logs in.
- Out-of-hours cutover
- No mail downtime
- Go-live day support
Lock it down and get a copy off it
MFA and conditional access applied, admin rights trimmed, legacy sign-in closed, sharing rules set, then an independent daily backup of everything with a restore actually tested rather than assumed.
- Security baseline
- Independent backups
- Restore tested
Then it's just looked after
Day-to-day support, starters and leavers, licence reviews at renewal. When something new is worth doing, whether Copilot, Teams Phone or an automation, we'll say so.
- Day-to-day support
- Licence reviews
- Expansion of Services
The right plan per person,
not the same plan for everyone.
Microsoft sets the licence cost; what we charge is the management on top. A warehouse user and a director rarely need the same licence, and most savings come from simply looking. Tell us your headcount and we’ll quote both.
Business Basic
Web and mobile apps, hosted email
- Business email on your own domain
- Teams, SharePoint and OneDrive
- Web and mobile versions of the apps
- Good fit for shared and shop-floor users
Desktop apps not included
Most common
Business Standard
Full desktop apps for most staff
- Everything in Basic, plus:
- Desktop Word, Excel, Outlook and PowerPoint
- Installs on up to five devices per user
- Webinars, Bookings and Clipchamp
- The right choice for most office staff
Copilot can be added per user
Business Premium
Where security and devices matter
- Everything in Standard, plus:
- Intune device management and remote wipe
- Defender for Office 365 and Business
- Conditional access and advanced identity controls
- Information protection and retention policy
Usually the best value for regulated sectors
Enterprise (E3/E5), frontline (F1/F3), non-profit and education licensing also available, plus Copilot, Teams Phone and 365 Backup as add-ons.
Same suite.
Very different requirements.
Finance needs compliance and audit trails; healthcare needs patient data kept properly; manufacturing needs shop-floor users on the right licence. We set the tenant up for the sector you’re actually in.
- Construction
- Energy
- Enterprise
- Entertainment
- Finance
- Food & hospitality
- Legal
- Leisure
- Manufacturing
- Medical & healthcare
- Professional services
- Retail & e-commerce
- Startups & SMEs
- Charities & non-profit
Microsoft 365 is
part of the setup, not all of it.
Most clients take 365 alongside support and hosting, on one bill and one point of contact.
IT support
Day-to-day helpdesk, starters and leavers, hardware, networks and on-site visits, with your 365 tenant managed as part of the same plan.
Hosting & DNS
Your 365 mail flow depends on DNS being right. We manage the domain, MX, SPF, DKIM and DMARC records alongside your website hosting.
Security
Most breaches start with an email. Defender tuning, mail filtering and staff awareness sit alongside the wider security work we do.
Common questions
Before you move or hand over.
Does Microsoft back up my data?
Not in the way people assume. Microsoft guarantees the service is available and keeps deleted items for a limited window, typically 30 to 93 days depending on the item. Beyond that, or if data is maliciously deleted or encrypted, there’s nothing to go back to. That’s why we run an independent daily backup.
Can you move us from Google Workspace?
Yes: mail, calendars, contacts and Drive files, migrated out of hours with no mail downtime. We also migrate from IMAP hosts, on-premise Exchange and old file servers, and merge tenants after an acquisition.
We already have 365. Can you just take it over?
That’s most of our work. We start with a tenant review covering licences, security settings, mail flow, sharing and backup, and give you a written list of what’s wrong, what it’s costing and what we’d change first.
Do we buy licences from you or from Microsoft?
Either. We can supply and manage licences on one bill with your support, or leave them with Microsoft and simply administer the tenant. The tenant stays yours in both cases.
Is Copilot worth paying for?
For some roles, clearly. For others, not yet. We run a pilot group first and check your file permissions before enabling it, because Copilot surfaces anything a user can already access and a messy SharePoint becomes a data problem very quickly.
Can you assist with Training?
We can provide resources to you and your staff on using 365 services by means of guides, videos and other resources.
What happens to a mailbox when someone leaves?
We convert it to a shared mailbox or archive it, forward mail where needed, revoke access properly and reclaim the licence. With backup in place, their data stays recoverable long after the licence is gone.
Who owns the tenant and the data?
You do. The tenant is registered to your business. If you ever move to another provider we hand it over cleanly.
Get a free Microsoft 365 Consultation
We’ll look at your tenant and tell you what we find: licences you’re not using, security settings that should be on, where your files really live, and whether anything is actually backed up.
