What Is Email Archiving? Sydney Business Buyer's Guide

What is email archiving in your proposed service?

For a Microsoft environment, begin with the distinction your supplier is making. Microsoft describes an Outlook In-Place Archive or Online Archive as a mailbox that stores older messages without occupying space in the primary mailbox. Its support guidance also distinguishes that mailbox from the existing Archive mail folder. Those are useful distinctions to bring into the sales conversation: ask the provider to show exactly which location their proposal covers.

Have them open a demonstration account and follow a message from its starting location to the proposed destination. Ask where the employee would look for it afterwards. If the proposal uses the phrase Microsoft 365 email archiving, request the precise feature name and an explanation of the settings they intend to apply. Keep the discussion tied to your own working arrangements rather than accepting a tour of every available feature.

Imagine an office manager trying to locate the final approval for a customer's scope change. Make that your demonstration scenario. Give the provider an approximate date, a customer name and an attachment to find. Watch the process from the office manager's perspective, including any request for administrator assistance.

For your purchasing brief, separate storage relief, access to correspondence and retention decisions. Ask for an explicit response to each requirement. If your immediate concern is a crowded mailbox, keep that objective prominent. If you need controlled access to historical correspondence, require a demonstration of that workflow before deciding whether the proposed service deserves a place in your budget.

Build the brief around finding a real answer

Give retrieval as much attention as moving messages. In the hypothetical scope-change example, define what a satisfactory result looks like: the authorised person finds the relevant exchange, opens the attachment and passes the answer to the colleague handling the customer. Ask the supplier to demonstrate that entire sequence. Include any approval step you want between a search request and access to another employee's correspondence.

Microsoft says an administrator enables the archive mailbox and sets policies controlling when emails move into it and how long they are saved there. Ask your provider to translate their proposed settings into plain English. Which messages would move? Who would approve the timing? What would the employee see? Request a written explanation that your office manager can review without interpreting a configuration screen.

Include a departure scenario in the brief. Suppose the person who managed a customer account leaves your business. Decide who should authorise a search of their historical correspondence and who should receive the results. Have the supplier explain their proposed handling of the account, access permissions and ongoing charges. Request confirmation of the arrangements before approving any account changes.

If you are comparing email archiving software, give each supplier the same scenarios and ask for the same evidence. For cloud email archiving, include a demonstration through the proposed user interface. Arrange a review with whoever owns your cloud and Microsoft 365 environment, so the purchasing brief reflects how you want staff to work.

Decide what you should keep before setting a timer

Before approving retention settings, write down your reasons for keeping different kinds of correspondence. You might want to review customer approvals separately from recruitment enquiries or routine supplier updates. Ask your legal or records adviser to establish the applicable requirements, including whether your organisation is an APP entity. Give your IT provider the approved decisions to implement, with an owner named for future changes.

The OAIC says APP entities must take reasonable steps to protect the personal information they hold from misuse, interference, loss and unauthorised access, modification or disclosure. Its guidance says the requirement to take reasonable steps to destroy or de-identify personal information no longer needed for a permitted purpose has exceptions for Commonwealth records and retention required by Australian law or a court or tribunal order. Seek advice about how those provisions apply to your circumstances before approving deletion.

Microsoft documents retention-policy options to retain content, automatically delete it after a specified period, or combine retention with subsequent deletion. Treat that configuration as the implementation of a business decision you have already approved. Ask the provider to show how the proposed settings match your documented requirements and how they would handle an exception you have authorised.

The OAIC's guidance includes archived and backup copies when describing reasonable steps to destroy or de-identify personal information that needs that treatment. Include those locations in the discussion with your advisers. Request an explanation of how each proposed retention or disposal decision would be handled across the locations within scope, and record anything the provider cannot yet confirm.

Compare proposals against the same responsibilities

Once you have agreed on the purpose, turn it into a common brief for suppliers. Keep your acceptance scenarios attached to the quote. Ask each provider to state what they will configure, what they will operate and what they expect your team to approve. Where a response is ambiguous, request a worked example before accepting the scope.

For the commercial comparison, request separate figures for setup, ongoing operation and any work outside the standard service. Ask how the quote treats former employees, historical imports and assistance with searches. Have the supplier identify the assumptions behind their price, including the accounts and information covered. Leave uncertain amounts visibly unresolved until the provider supplies an answer.

• •Ask for the exact service and licence names, with confirmation of which proposed functions the quote includes.
• •Request named responsibilities for approving access, changing retention settings and handling staff departures.
• •Require a demonstration of the agreed retrieval scenarios, including the steps your own staff would perform.
• •Ask for the proposed exit process, including export arrangements, assistance charges and confirmation of disposal where appropriate.

Discuss recovery separately during the evaluation. Ask the provider to demonstrate what they propose for an accidentally deleted message and explain the boundaries of that service. Record the answer alongside the archival retrieval demonstration. Bring your managed IT support contact into this review and agree who will take the first call when an employee needs help.

Approve a limited pilot before wider changes

For the initial implementation, propose a limited pilot with agreed boundaries. Select participants who can assess both everyday use and administration, such as an office manager and the person approving access requests. Define the messages, accounts and settings within scope. Ask the provider to explain the proposed reversal or recovery arrangements before approving any movement or deletion.

During the pilot, work through your retrieval scenarios using information you have authorised for testing. Have the employee perform their part of the task while the provider observes. Record where assistance was needed and whether the result met the agreed requirement. Review the access-approval process as carefully as the search itself, including who received the result and how you documented the request.

At the pilot review, compare what happened with the original brief. Did the authorised person retrieve the correspondence through the agreed process? Could the office manager explain where to seek help? Did the provider account for each proposed setting? Treat unanswered questions as work to resolve before wider approval. Request a short handover note and have someone from your team walk through it without the implementer leading every step.

Leave with a decision your team can own

When you revisit the question, what is email archiving meant to achieve for this business, answer with the outcome you approved. Perhaps your priority is access to older project correspondence under a defined approval process. Perhaps it is a storage arrangement with documented movement settings. Put that purpose at the top of the handover, followed by the people responsible for operating and reviewing it.

Keep the final record concise enough for your office manager to use. Include the service name, account scope, approved retention decisions and support contact. Attach the demonstrated retrieval process and the commercial assumptions you accepted. Schedule a review around business changes such as a new service line or a different records requirement, and name the person who will organise it.

For your next conversation with Peer 2 Peer IT, bring the proposal you are considering and a description of the correspondence you need to retrieve. Request a scoped review before authorising changes. Include your cyber security requirements in that brief, particularly access approval and sensitive information handling. Aim to leave the review with an agreed purpose, a demonstrated workflow and a clear owner for the next decision.

This article reflects best practices as of the publication date. Technology and security recommendations evolve, so verify current guidance with the original sources or our team before acting.