Google Workspace Cloud Backup 2026

Google Workspace cloud backup preserves recoverable copies of your practice’s Gmail and Drive records. Choose a separate backup when you need older versions or recovery after staff departure. Google’s native recovery windows help with recent deletions, but exports need a separate recovery method.

Protect Gmail and Drive Records

Map each client record to the account or shared drive that holds it. A mailbox belongs to its Workspace user. Files in My Drive can belong to individual staff accounts, while files in a shared drive belong to the organisation. A document shared with you can still belong to a client outside your practice.

Record the location, owner and authorised staff for each record type. Include the client correspondence in Gmail, working documents in My Drive and completed files in shared drives. Identify messages that contain actual attachments separately from messages that link to Drive files. Recovering an email with a link does not recover the linked document.

Your Workspace administrator manages the practice’s domain accounts. A client’s personal Google account needs its own authorised arrangement. Possessing the client’s password does not establish authority to copy their records. Ask the client to provide the agreed documents through the practice’s collection route.

Before a staff member leaves, decide who receives their practice-owned files and who needs access to retained correspondence. Keep that decision beside your staff access and departure arrangements. Shared-drive ownership avoids depending on one employee’s My Drive, but it still needs backup coverage and suitable membership.

Understand Google’s Retention and Export Options

Google provides short deletion-recovery windows, retention through Vault and downloadable exports. These options recover different things.

Native option	What it covers	Recovery limit or consequence
Gmail Trash	Messages a user deletes	Messages normally remain for 30 days. An administrator can recover permanently deleted messages within the following 25-day recovery window.
My Drive recovery	Files removed from a user’s Trash	Administrator recovery is available for 25 days after permanent deletion. It restores the selected deletion period, rather than one selected file.
Shared-drive recovery	A deleted shared drive or permanently deleted contents	The administrator has 25 days. A deleted drive can remain listed for 30 days, which does not extend recovery.
Deleted-user recovery	The deleted managed account and available data	Recover within 20 days. The required service licence must be available.
Vault	Supported data retained by rules or holds	Search and export retained data. Vault does not directly restore it into the original mailbox or Drive.
Data Export or Takeout	Downloadable copies within their respective scope	A downloaded archive requires an import or reconstruction method. It is not a working mailbox or shared drive.

Drive automatically removes items from Trash after 30 days. Emptying Trash early starts permanent deletion earlier. Use Google’s documented recovery window for the event that actually occurred. Do not treat the periods as a guaranteed combined allowance for every deletion.

Google’s administrator Gmail restore excludes deleted drafts, spam messages and deleted label organisation. My Drive recovery can stop at a storage limit, and Google instructs users to reshare recovered files. Shared-drive restoration requires the appropriate Drive administrator privilege. Select the smallest deletion period that covers the missing records to avoid returning unrelated files.

Check the Edition and Departing User

Google includes Vault with Business Plus, Enterprise Standard and Enterprise Plus, among other editions. An account on Business Starter or Business Standard does not gain Vault retention simply because it uses Gmail and Drive. Assigned licences and configured retention rules determine coverage.

Deleting a user also removes their data from Vault’s searchable records and ends the protection of their holds. Google recommends an appropriate Archived User licence for preserving a departing user’s data. Suspension preserves the account but continues its active-account billing. Set the departure arrangement before deleting the user.

Google supports administrator shared-drive recovery across its Business editions, including Business Starter. The practice’s storage limits and sharing settings still affect operation. Vault coverage does not lengthen the shared-drive administrator recovery window.

Keep an Export Usable

Google’s organisation-wide Data Export includes users and shared drives. Takeout is a user export, so one employee’s download must not be treated as an organisation-wide shared-drive backup. Review the export report for missing files before relying on an archive.

Google’s temporary export bucket expires 60 days after the export starts. Download completed parts to the agreed protected storage before expiry. Preserve the report with the archive and document how mailbox messages or exported documents will be returned to a usable destination.

Choose a Workspace Backup Arrangement

For practice-controlled Gmail and Drive records that need recovery beyond Google’s deletion windows, choose a separate backup with shared drives explicitly protected. Keep native recovery available for recent mistakes. Add Vault when the practice needs retention rules or holds, with the necessary licences and account-preservation arrangements.

Arrangement	Gmail and Drive coverage	Older records and departure	Permissions and restore destination
Native deletion recovery	Recent Gmail, My Drive and shared-drive deletions	Time-limited recovery. Deleted users have their own shorter window.	Returns data to the Google account or drive. My Drive files need resharing.
Vault retention with account preservation	Retained Gmail and supported Drive data	Rules and holds apply to licensed accounts. Deleting a user undermines this arrangement.	Produces exports. Rebuilding a mailbox or Drive needs a separate method.
Periodic export stored separately	Exported mailbox and file contents within the selected scope	Retains the downloaded archive for your chosen storage period. Future changes need another export.	Requires import or reconstruction. A file copy does not establish the original owner or access settings.
Afi Backup	Gmail, user Drive and shared-drive backups	Selected backup versions and inactive-resource archives follow configured retention and archiving rules.	Selected mail can return under a separate label. Files can return to a separate folder or another user or shared drive. Sharing restoration is optional.

Afi’s documented recovery routes suit a practice that needs selected items and a separate destination for inspection. Its Drive recovery converts native Google documents through Office formats. Google-specific widgets or formatting can be lost. Review those elements before treating a recovered document as complete.

Afi requires the restore destination user or shared drive to exist. Shared-drive operations need authorised access through an active Manager or Content Manager. It does not recreate deleted accounts or shared drives for you. Its retention rules can remove older item versions, and archive expiry can remove a departed user’s entire backup.

Choose the native route when the record remains within its recovery window and returning a deletion period to the original account is acceptable. Choose a separate backup when selected-version recovery or access after departure decides the outcome. Keep the practice-wide owners and recovery priorities in your cloud backup arrangements.

Restore a Fictional Client File

This fictional exercise uses a disposable document and email for a client company. It contains no client information. The expected result is a readable recovered document and email attachment, with access limited to the authorised review staff.

Use a practice-controlled disposable account and a restricted test folder. For the Afi route below, the account or shared drive must already be protected and have a completed backup containing the test records. The operator needs permission to restore to the chosen destination. Keep the original records throughout the exercise.

1. Create a document called Recovery exercise in the test folder. Put a distinctive fictional sentence in it. Attach a disposable PDF with the same sentence to a test email.
2. Confirm that the backup contains both records. Record their owner, location and current sharing. Make a harmless change to the document after that backup so the earlier version is recognisable.
3. Open the relevant backup in Afi. Select the document version containing the original sentence. Choose recovery to a separate folder in the authorised test destination, without overwriting existing content.
4. Leave sharing-permission recovery off for the inspection copy. Confirm that the destination folder itself is restricted before starting. Open the recovered file and compare its text and formatting with the preserved original.
5. Select the test email from its mailbox backup. Recover it to a separate label in the authorised destination mailbox. Open the message and its attachment, then confirm the fictional sentence appears in both.
6. Inspect the recovered document’s owner and sharing list. Check shared-drive membership and inherited folder access as well as direct sharing. An unauthorised staff account must be unable to open it.
7. Record the backup version, destination and outcome. Keep the recovered copy separate until the authorised staff member accepts it. The original document and message must remain intact.

If the document has the wrong owner, confirm whether you restored it to a user’s My Drive or an organisation-owned shared drive. Select the intended destination and repeat the separate-folder recovery. If access is wider than intended, restrict the destination’s membership or sharing before using the copy.

For a missing attachment, inspect the message in the backup first. A Drive link requires a separate file recovery. If an attachment is present in the backup but absent after restoration, give Afi support the recovery job ID and affected message details. Send no client content unless the practice authorises that disclosure.

For a native Google recovery failure, the Workspace administrator can escalate through Google Workspace support with the affected account, deletion event and recovery status. Escalation does not extend an expired recovery window. If Afi reports a missing destination or denied access, correct that prerequisite before repeating recovery.

Separate the Client Form From Drive

Collect and correct the client’s answers before deciding which completed documents belong in Drive. Tax Genie guides the client through the form, checks answers automatically with rules and AI and returns fixable issues to the client. Only the affected sections reopen on the same private link.

Tax Genie files completed documents to Google Drive as part of its supported document-filing options. Your practice chooses the destination and who can see those documents. Workspace backup then protects the Google records included in its coverage.

Tax File Numbers (TFNs) never appear in Tax Genie emails, exports or generated documents. A Drive copy of those outputs therefore does not contain every client detail. Recovering that copy does not establish a Tax Genie connection or synchronise changes back to the client form.

Before accepting a recovered completed document, match it to the client’s agreed filing destination and inspect access. Keep the client form’s corrections in Tax Genie and the Drive recovery result in the practice’s recovery record.