Your first secured Microsoft 365 backup
in under 10 minutes.

CYBBACK offers two ways to get started. Both unlock the full Office 365 feature set.

Option A — Free trial

1. Open cybback.com/essai-gratuit.
2. Fill in your work email, company and a password. Click Start free trial.
3. Confirm via the verification email.
4. On the trial selection screen, pick Office 365. Your trial workspace is provisioned instantly.

Option B — Paid licence (Stripe checkout)

1. Go to cybback.com/tarifs and pick the Office 365 plan that matches your seat count.
2. Click Subscribe. Stripe Checkout supports cards, SEPA and invoicing on annual plans.
3. Your licence is active immediately — visible under Account → Subscription.

CYBBACK authenticates against Microsoft Graph through a dedicated app registration with read-only application permissions on every workload — Exchange, OneDrive, SharePoint, Teams.

1. Create the app registration

1. Open entra.microsoft.com as a Global Admin.
2. Go to Identity → Applications → App registrations → + New registration.
3. Name it CYBBACK Office 365 Backup. Account types: Single tenant. Leave redirect URI empty. Click Register.
4. Copy the Application (client) ID and Directory (tenant) ID.

2. Grant API permissions

1. Go to API permissions → + Add a permission → Microsoft Graph → Application permissions.
2. Add the following read permissions:
   • Mail.Read, MailboxFolder.Read.All — Exchange
   • Files.Read.All, Sites.Read.All — OneDrive & SharePoint
   • Calendars.Read, Contacts.Read — Calendar & Contacts
   • Channel.ReadBasic.All, ChannelMessage.Read.All, Team.ReadBasic.All — Teams
   • User.Read.All, Group.Read.All — Discovery
3. For restore capability, add the matching ReadWrite permissions.
4. Click Grant admin consent at the top.

3. Create a client secret

1. Go to Certificates & secrets → + New client secret.
2. Set expiration (24 months recommended) and copy the Value immediately — Azure won't show it again.

4. Paste credentials into CYBBACK

1. Open app.cybback.com/dashboard/o365-backup → Settings.
2. Paste Tenant ID, Client ID, Client Secret. Click Save credentials.
3. CYBBACK runs an authentication test and lists your users on success.

Backup files are stored on CYBBACK's secure EU infrastructure by default. Add a second layer with client-side encryption: each file is encrypted before it leaves the worker.

1. On the Settings tab of the Office 365 page, scroll to Security options.
2. Toggle AES-256 Encryption ON.
3. Click Save. Applies to new backups; previous backups remain readable.

Want full data sovereignty? Point CYBBACK at your S3-compatible bucket — AWS S3, Scaleway, OVH, Wasabi, MinIO, Backblaze B2, IBM COS. Your data, your provider, your region.

Provision the bucket

1. In your S3 provider, create a private bucket (no public access, versioning recommended).
2. Create an access key / secret key with permissions limited to that bucket.
3. Note your endpoint URL and region.

Configure CYBBACK

1. Open Dashboard → Storage.
2. Select My own S3 storage.
3. Fill the form, click Test connection, then Save.

• Required IAM actions: PutObject, GetObject, DeleteObject, ListBucket.
• Resilience: CYBBACK stores an encrypted snapshot of S3 credentials with each backup. Old backups remain restorable even after you switch providers.

You're now fully configured. Time to run your first Office 365 backup — manually for instant peace of mind, then schedule recurring runs.

Pick the scope

1. On the Dashboard tab, choose your scope: All users, Specific users, or per-service (Exchange only, SharePoint only, Teams only…).
2. SharePoint sites and Teams are listed separately and can be selectively included.

Manual backup

1. Click Run backup now. The job appears with status pending, then running.
2. Progress is streamed live, per service: Exchange messages fetched, OneDrive files uploaded, SharePoint sites traversed, Teams channels archived.

Schedule automatic backups

1. From Dashboard → Schedules, click New schedule.
2. Service: Office 365. Frequency: Daily / Weekly / Custom (cron).
3. Pick a low-activity window (e.g. 02:00 UTC) and click Save.

Track your backups

• Real-time: the Events page streams every operation across all services via SSE.
• Notifications: success / failure / drift alerts via email, Slack and webhooks.
• Drift detection: alerts when an unusual number of messages, files or channels disappear between runs — perfect to catch accidental mass deletions.

CYBBACK restores from any previous backup. Pick a single email, channel post, OneDrive file or SharePoint document — and write it back to the original mailbox or to a different one.

The 3-step restore flow

1. Selection. Open the backup, browse users → services (Exchange, OneDrive, Calendar, Contacts) and global resources (SharePoint sites, Teams) → folders → items. Hierarchical browsing for SharePoint document libraries.
2. Options. Choose your safety net:
   • Dry-run — simulate the restore, no Graph write.
   • Per-service cherry-pick — restore Exchange + OneDrive while leaving SharePoint untouched, for example.
   • Prefix — prepend a tag (e.g. [restored]) to folder/file names to avoid clashes.
3. Execution. A worker picks up the job, restores in the background, reports progress in real-time. You can close the tab — completion is emailed.

Best practices

• Always start with a dry-run — especially when restoring into live mailboxes or production SharePoint sites.
• Use the prefix option for partial restores — gives end users an obvious visual cue.
• Off-boarded users: restore their data into a shared mailbox or SharePoint site before the licence is fully removed.
• Native exports (EML, ICS, VCF, ZIP) are also available from the Export tab if you need a downloadable archive instead of a live restore.