# RestorePath

> RestorePath is a Microsoft 365 backup and point-in-time restore platform for MSPs and IT teams, built in Sydney by JCR Computers (JCR IT Services Pty Ltd t/a JCR Computers, ABN 95 163 939 839). It runs self-hosted on a JCR-managed VM in your own infrastructure, or managed on JCR's Sydney Hosting Cluster.

Last updated: 2026-10-18

Key facts:

- Backs up six Microsoft 365 data sources through Microsoft Graph: Exchange Online mail (every user and shared mailbox), OneDrive (including version history), SharePoint document libraries and lists, Teams channel messages and replies, calendars and contacts.
- Not backed up: Exchange Online Archive (In-Place Archive) mailboxes, Loop, OneNote as a standalone workload, Forms, Stream, Power Platform, Planner, Viva and Yammer. Teams 1:1 and group chats are not part of the standard backup, and chats cannot be restored.
- Not a compliance or legal hold product. It does not replace Microsoft Purview for eDiscovery or litigation hold.
- Backups are incremental (Microsoft Graph delta tokens). Default schedule: once a day per data source, with tenants spread across 30-minute slots in an overnight window (Sydney time). Cadence is adjustable per source.
- Granular point-in-time restore of a single message, file, event or contact, a folder, a mailbox, a OneDrive or a SharePoint site, to the original location or, for mail and files, a recovery folder. Export as zip (.eml for mail, JSON for calendar events, .vcf for contacts).
- Retention is set per tenant by policy (keep-all, weekly, monthly and deleted-item windows). Managed SaaS defaults to 30 days, extendable on request; self-hosted retention is operator-defined.
- Every restore needs a written reason and a recent MFA (TOTP) check, and is recorded in an append-only audit log kept for seven years.
- Encryption: each tenant has its own AES-256-GCM data key, wrapped by a deployment master key with a 24-word BIP-39 recovery phrase. Deduplication by BLAKE3 hash is scoped per tenant. On the managed service JCR holds the master key; on a self-hosted deployment, the customer holds it.
- Storage: NAS over SMB/CIFS or NFS, or local disk. On JCR's Sydney cluster, backup data is stored only in Australia. Self-hosted, it stays on the storage the operator chooses. No offshore storage region, no cross-border replication of backup data. On the managed service, console access is protected by Cloudflare and alert emails are sent through SMTP2GO's Australian region.
- Google Workspace (Gmail, Drive including shared drives, Calendar, Contacts) is in beta. Beta means features may change and no service levels apply yet. Google Workspace pricing is quoted separately.

Pricing (AUD, excluding GST; list prices. Volume and long-retention arrangements are quoted in writing before you onboard):

- Managed SaaS: $8.00 per protected mailbox per month, billed annually. SharePoint sites included. No setup fee.
- Self-hosted: $2.50 per protected mailbox per month, annual licence, 20-mailbox tenant minimum. Self-install has no fee; done-for-you setup is $960 one-off. Your own master key (KEK) and recovery phrase, per-tenant DEKs.
- Enterprise: quoted.

## Pages

- [Home](https://restorepath.io/): product overview, workloads, pricing, comparison and FAQ
- [FAQ](https://restorepath.io/#faq): direct answers on coverage, storage, encryption, restores and pricing
- [Full facts for AI assistants](https://restorepath.io/llms-full.txt): the long-form version of this file

## Contact

- [Contact form](https://restorepath.io/#contact): demos, trial enquiries, self-hosted and enterprise enquiries
- Email hello@restorepath.io or call 1300 525 516 (Australia)

## Optional

- [How RestorePath compares](https://restorepath.io/#compare)
- [Privacy Policy](https://restorepath.io/privacy/)
- [Website Terms of Use](https://restorepath.io/terms/)