SharePoint Recycle Bin & File Recovery Guide

SharePoint Recycle Bin & Recovery: Enterprise Guide (2026)

SharePoint Online recycle bins, Microsoft Purview retention policies, Microsoft Purview eDiscovery (Premium) hold, and third-party backup form the layered recovery architecture for enterprise SharePoint Online and Microsoft OneDrive content. EPC Group enterprise clients deploy all four layers for HIPAA, FINRA, SEC, FedRAMP, and GxP compliance.

EPC Group has delivered SharePoint recovery + DR architectures since SharePoint 2003.

TL;DR — SharePoint Recovery 4-Layer Architecture

Layer	Recovery Window
1. SharePoint Site Recycle Bin	93 days (default)
2. SharePoint Site Collection Recycle Bin	93 days (default)
3. Microsoft Purview Retention Policy	1-10+ years
4. Microsoft Purview eDiscovery (Premium) Hold	Indefinite
5. Third-Party Backup (optional)	Granular point-in-time

Layer 1: SharePoint Site Recycle Bin

Default Behavior

• 93-day retention (configurable)
• User-accessible (their own deleted items)
• First-stage recycle bin

Site Owner / Admin Access

• Site owners can restore items from anyone's deleted content within site
• 93-day window

Layer 2: SharePoint Site Collection Recycle Bin

Default Behavior

• Items moved here when deleted from Site Recycle Bin
• 93-day retention from original deletion (NOT 93 + 93)
• Site collection admin access

Layer 3: Microsoft Purview Retention Policy

Long-Term Preservation

• Configurable 1-10+ years retention
• Required for HIPAA / FINRA / SEC compliance
• Microsoft Purview Records Management (advanced)
• Microsoft Compliance Manager attestation

Standard Retention Periods

• HIPAA: 7 years
• FINRA Rule 4511: 7 years
• SEC Rule 17a-4 broker-dealer: 10 years
• GxP / 21 CFR Part 11: 7+ years
• General Microsoft 365 audit: 7 years (Microsoft Purview Audit Premium)

Retention Policy Behavior

• Items deleted by user are preserved (hidden) for retention period
• Microsoft 365 admin / compliance officer can recover
• Tamper-evident audit trail

Layer 4: Microsoft Purview eDiscovery (Premium) Hold

Litigation + Regulator Hold

• Custodian-based hold
• Hold preservation across SharePoint, OneDrive, Exchange, Microsoft Teams
• Microsoft Copilot prompts and responses included
• In-place hold (content stays accessible but cannot be permanently deleted)

When to Use

• Active litigation
• Regulator investigation
• Compliance hold (FINRA Rule 3110, SEC requests)
• HIPAA breach investigation

Layer 5: Third-Party Backup (Optional)

When Microsoft 365 Native Is Insufficient

• Granular point-in-time restore
• Cross-tenant restore
• Air-gapped backup (immutable)
• Compliance-grade backup attestation for some industries

Vendors

• Veeam Backup for Microsoft 365
• AvePoint Cloud Backup
• Spanning Backup for Microsoft 365
• Druva inSync for Microsoft 365

EPC Group Standard

• Healthcare (HIPAA): Third-party backup recommended for granular restore
• Financial services (FINRA / SEC): Third-party backup for SEC Rule 17a-4 attestation
• Government (FedRAMP): Microsoft native typically sufficient
• Pharma (GxP): Third-party backup for clinical trial data

Recovery Scenarios

Scenario 1: Accidental User Deletion

Recovery layer: Site Recycle Bin (Layer 1)
Time: Within 93 days (default)
Process: User restores from their own recycle bin

Scenario 2: Accidental Site Owner Deletion

Recovery layer: Site Recycle Bin or Site Collection Recycle Bin (Layer 1-2)
Time: Within 93 days
Process: Site owner / site collection admin restores

Scenario 3: Beyond 93-Day Recycle Bin

Recovery layer: Microsoft Purview Retention Policy (Layer 3)
Time: Within retention period (1-10+ years)
Process: Compliance officer recovers via Microsoft Purview eDiscovery

Scenario 4: Litigation / Regulator Hold

Recovery layer: Microsoft Purview eDiscovery (Premium) Hold (Layer 4)
Time: Indefinite (during hold)
Process: Legal / compliance team produces content via Microsoft Purview eDiscovery

Scenario 5: Ransomware / Mass Deletion

Recovery layer: Third-Party Backup (Layer 5) or Microsoft Purview Retention
Time: Granular point-in-time restore
Process: IT + third-party backup vendor restoration

Scenario 6: Cross-Tenant Restore (M&A Reversal)

Recovery layer: Third-Party Backup (Layer 5)
Time: Cross-tenant restore (Microsoft native does not support)
Process: Third-party backup vendor cross-tenant restoration

Microsoft Purview Retention Configuration

Standard Healthcare HIPAA Configuration

• 7-year retention on all SharePoint sites
• 7-year retention on Microsoft OneDrive
• 7-year retention on Microsoft Teams chat
• Microsoft Customer Lockbox required
• Microsoft BAA execution

Standard Financial Services FINRA / SEC Configuration

• 7-year retention on Microsoft Exchange + SharePoint + Microsoft Teams
• 10-year retention for SEC Rule 17a-4 broker-dealer scenarios
• Microsoft Purview Records Management WORM-like preservation
• Microsoft Information Barriers respect

Standard Government FedRAMP Configuration

• Microsoft 365 GCC / GCC High retention
• DoD STIGs alignment
• 7+ year retention per agency requirements

Standard Pharma GxP Configuration

• 21 CFR Part 11 audit trail integrity
• 7+ year retention on clinical trial content
• Microsoft Purview Records Management

Microsoft 365 Copilot Recovery

Microsoft 365 Copilot prompts + responses are subject to:

• Microsoft Purview Audit (Premium) for 7+ year retention
• Microsoft Purview eDiscovery (Premium) for litigation hold
• Microsoft Purview AI Hub for AI-specific governance

EPC Group SharePoint Recovery Engagement

EPC Group fixed-fee SharePoint Recovery Architecture:

• Mid-market: $100K-$300K (3-6 months)
• Enterprise: $300K-$700K (6-9 months)
• Fortune 500: $700K-$2M (9-12 months)

Plus optional third-party backup deployment: $50K-$200K.

Standard Deliverables

• SharePoint Recycle Bin configuration
• Microsoft Purview Retention Policy library
• Microsoft Purview eDiscovery (Premium) workflows
• Microsoft Purview Records Management file plan
• Third-party backup deployment (where applicable)
• Microsoft Sentinel custom analytics rule library
• Microsoft Compliance Manager attestation
• Annual DR test
• 90-day post-deployment hyper-care

Frequently Asked Questions

How long can I recover SharePoint content?

• Native: 93 days via recycle bin
• Microsoft Purview Retention: 1-10+ years
• Microsoft Purview eDiscovery (Premium) Hold: indefinite during hold
• Third-party backup: granular point-in-time restore

Should we use third-party backup?

For HIPAA / FINRA / SEC: typically yes for granular restore + compliance attestation. For mid-market non-regulated: Microsoft native often sufficient.

What about Microsoft 365 Copilot prompts?

Microsoft Copilot prompts + responses subject to Microsoft Purview Audit (Premium) retention + Microsoft Purview eDiscovery (Premium) hold.

Who delivers EPC Group SharePoint recovery engagements?

Errin O'Connor (Founder & Chief AI Architect, 4-time Microsoft Press & Sams author including SharePoint book) leads. Senior architects with SharePoint experience since 2003.

Next Steps

Schedule a 30-minute SharePoint recovery discovery call at /schedule or call (888) 381-9725. Senior architects (not sales) take discovery calls.

Related reading: Microsoft 365 Disaster Recovery Business Continuity Guide, Microsoft 365 Compliance Center Enterprise Guide, Microsoft Information Protection Enterprise Guide, SharePoint Document Management Enterprise Guide, and SharePoint Migration Consulting Enterprise Services.