The migration tool costs $15,000. The data loss costs $500,000. The compliance finding costs $2 million. Here is what nobody tells you about doing it yourself.
Last updated: 2026 · Read time: ~7 minutes
Last updated by Errin O'Connor, Founder & Chief AI Architect, EPC Group
The uncomfortable truth about DIY Microsoft 365 migrations: Many organizations try DIY tenant migrations to save on consulting fees. They aim to save between $50,000 and $150,000. However, these efforts often lead to unexpected costs. In fact, organizations may end up spending an extra $150,000 to $500,000 more than they initially planned.
This extra cost arises from hidden issues, including:
This guide details the seven hidden costs, providing real numbers from actual failures.
The pitch is appealing. Your IT team is skilled in Microsoft 365 and can handle the migration process well.
YouTube has hundreds of tutorials on migration. Moreover, Microsoft's documentation offers a clear step-by-step guide.
So, why pay a consulting firm between $100,000 and $300,000 for a task your team can manage?
Many people think they can rewire their house after watching an electrician on YouTube. The tools shown are real, and the tutorials are accurate. Their confidence is understandable, but it has limits. These limits usually occur at:
After a certain point, DIY migrations can lead to unexpected costs. The things you don't know can become much more expensive than the things you do know.
The worst part is that you may not realize something went wrong until weeks or months later. This can happen when:
EPC Group has handled hundreds of unsuccessful DIY migrations in the last since 1997. We often find seven hidden costs during these projects. Here are the costs, along with actual figures from real organizations:
The most insidious hidden cost because it is invisible at first. DIY migrations using basic tools commonly lose: emails with large attachments (silently dropped during migration), OneDrive files with special characters or long paths (skipped without warning), SharePoint version history (only current version migrated), Teams chat history (not supported by most tools), and calendar delegation settings (lost during mailbox move).
A law firm discovered 3 months after their DIY migration that 12,000 emails with attachments over 35 MB had been silently dropped. Those emails contained contract documents, court filings, and client correspondence. The remediation — hiring a specialist to recover the data from their decommissioned source environment — cost $87,000. The reputational damage with clients who received incomplete file transfers was immeasurable.
DIY migrations rarely include change management, training, or user support planning. Users are handed a new system and told to figure it out. The result: 2-4 weeks of severely degraded productivity as users search for features, rebuild email rules, reconfigure desktop clients, and submit help desk tickets. For a 1,000-user organization at $50/hour loaded cost, even a 20% productivity decline over 2 weeks costs $400,000.
A technology company migrated 800 users from Google to M365 over a weekend. Monday morning, help desk tickets spiked 800%. Users could not find their files (the folder structure was reorganized during migration without communication). Outlook was configured but Google-specific labels were not mapped. Calendar sharing permissions were lost. The CTO later estimated that the first two weeks post-migration represented "the least productive period in the company's history."
Regulated industries (healthcare, finance, government) must maintain continuous compliance during migration. DIY migrations create gaps: DLP policies not replicated in the target, retention policies paused during migration, audit logging gaps during the transition, encryption-at-rest not configured in the target before data arrives, and chain-of-custody documentation missing. Each gap is a potential audit finding.
A healthcare organization performed a DIY tenant migration without a BAA covering the migration tool. During a routine OCR audit 6 months later, auditors identified that PHI had been transferred through an unauthorized tool without encryption logging. The resulting corrective action plan cost $340,000 to implement, and the organization was placed on enhanced monitoring for 2 years.
DIY migrations almost always run longer than planned. What was supposed to take 4 weeks stretches to 12. During this time, you are paying for licenses in both the source and target environments. For a 2,000-user organization on E5 ($57/user/month), dual licensing costs $114,000 per month. Every month of delay burns another $114K.
A manufacturing company started a DIY migration in January with a target completion of March. API throttling, data errors, and staff availability issues pushed the timeline to September — 6 months of delay. The dual licensing cost during the overrun was $312,000. The migration tool license that was supposed to save them money cost $18,000. Net loss: $294,000.
DIY migrations land on the shoulders of internal IT staff who are already fully utilized. Migrations require evening and weekend work for batch processing, monitoring, troubleshooting, and cutover. IT teams working 60-80 hour weeks for months experience burnout, errors increase, and key staff may resign. Replacing a senior Microsoft 365 administrator carries real recruitment and ramp-up cost.
A financial services firm's IT director ran the migration himself with a team of three. After 14 weeks of weekend work, the lead engineer resigned. The migration stalled for 6 weeks while a replacement was found and onboarded. The total cost of lost expertise, recruitment, and project delay far exceeded what a professional migration would have cost.
This is the newest and most overlooked hidden cost. Organizations migrating to Microsoft 365 often plan to deploy Copilot for Microsoft 365 after migration. But if the migration does not include proper data governance — sensitivity labels, access controls, SharePoint permissions cleanup — Copilot will surface sensitive data to users who should not see it. Copilot indexes everything in Microsoft 365. If your migration dumped 10 years of files into SharePoint without proper permissions, Copilot becomes a data leak machine.
An organization deployed Copilot 30 days after their DIY migration. Within a week, an employee asked Copilot to "summarize recent salary discussions" and received a Copilot-generated summary pulling from an HR SharePoint site that had been migrated with open permissions. The incident triggered an internal investigation, a Copilot suspension, and a 6-week permissions remediation project costing $95,000.
When email goes down, clients notice. When shared files disappear, partners notice. When calendar invitations are lost, prospects notice. Every external-facing failure during a migration chips away at professional credibility. For client-facing organizations (consulting firms, law firms, agencies), a migration failure can directly cost client relationships.
An accounting firm migrated tenants during tax season (a decision made by someone who had never done a migration before). External email was disrupted for 6 hours during the DNS cutover. Four clients reported that tax filing confirmations were delayed. One client — representing $400K in annual revenue — demanded a meeting with the managing partner and threatened to move their business. The email worked fine after 6 hours. The client relationship took 18 months to rebuild.
The DIY migration that was supposed to save $100,000 cost $410,000 more than hiring EPC Group.
If you are unsure about needing professional help for your migration, EPC Group's Migration Readiness Assessment can help. For a fixed fee of $25,000, you will receive a comprehensive evaluation of your current systems, recommendations tailored to your specific needs, a clear roadmap for a successful migration, a complete risk analysis, a detailed timeline, a cost estimate, and a full migration plan. You can choose to migrate with EPC Group or take the plan to any partner — either way, you'll understand exactly what to expect before moving any data. (The six concrete deliverables of the Assessment are shown in the cards below.)
Automated inventory of every user, mailbox, site, team, and integration in your environment
Identification of migration blockers, compliance requirements, and hidden complexity
Exact cost for the full migration — no surprises, no overruns, no hidden fees
User-by-user migration sequence organized by department, risk, and collaboration patterns
For regulated industries: control continuity plan covering HIPAA, SOC 2, or FedRAMP
Week-by-week schedule with milestones, dependencies, and stakeholder communication plan
A DIY Microsoft 365 migration appears inexpensive — typically $5,000-$15,000 for migration tool licenses (BitTitan MigrationWiz, ShareGate, or similar) plus internal IT staff time. However, when you factor in hidden costs, the true cost is typically 3-5x higher: IT overtime ($20,000-$80,000 for weekend and after-hours work), productivity loss (scaling with user count and downtime duration), data loss remediation ($10,000-$100,000 to recover lost files and emails), compliance gap remediation ($25,000-$200,000 for audit findings), duplicate licensing overlap ($10,000-$50,000 per month of extended timeline), and post-migration cleanup ($15,000-$50,000 for permission fixes, broken workflows, and user support). For a 1,000-user organization, a DIY migration that saves $50,000 in consulting fees often costs $150,000-$300,000 in hidden costs.
Industry research and EPC Group's experience remediating failed DIY migrations suggest that 15-25% of DIY migrations experience some form of data loss. This includes: lost email messages (particularly items larger than 150 MB or with complex attachments), missing OneDrive files (especially files with special characters, long path names, or files exceeding SharePoint's 250 GB limit), corrupted SharePoint permissions (where inherited permissions are lost or overwritten), deleted Teams chat history (native tools do not support cross-tenant Teams chat migration), and lost version history (many tools migrate only the current version). Most data loss in DIY migrations is not discovered until weeks or months later when a user searches for a specific file or email that was not migrated. By then, the source environment may have been decommissioned.
BitTitan MigrationWiz and ShareGate are legitimate migration tools used by IT teams worldwide. They work well for small-scale migrations (under 200 users) with simple requirements: email-only migration, basic file migration, or single-workload moves. However, they have significant limitations for enterprise migrations: (1) Limited Teams migration capabilities (no chat history, no private channels). (2) No built-in coexistence or dual mail flow. (3) Basic throttling management that often results in slow migration speeds at scale. (4) Limited validation and reporting compared to enterprise tools. (5) No compliance-grade audit trail. (6) Per-user licensing costs that scale linearly ($12-$25/user for MigrationWiz). For organizations with 500+ users, regulated industry requirements, or complex multi-workload migrations, these tools should be used as components within a broader migration strategy — not as standalone solutions.
A failed mid-migration creates a split-state scenario where some users are on the old system and some are on the new, with email potentially routing to the wrong environment. Recovery options are limited and expensive: (1) Roll back — move migrated users back to the source tenant. This requires re-migrating data and can take days, during which those users have limited service. (2) Push forward — accelerate the remaining migration, accepting higher risk and potential data loss. (3) Freeze — leave users in split-state while troubleshooting, which degrades collaboration and may cause email routing failures. EPC Group regularly receives emergency calls from organizations in mid-migration crisis. Our emergency migration remediation service stabilizes the environment and completes the migration, but it costs 2-3x more than if we had been engaged from the beginning due to the complexity of untangling a partially failed migration.
A DIY migration is appropriate when: (1) your organization has fewer than 200 users, (2) you are migrating a single workload (email only, or files only), (3) you have no regulatory compliance requirements (HIPAA, SOC 2, FedRAMP), (4) you have experienced internal IT staff with prior migration experience, (5) you can tolerate 4-8 hours of planned downtime, and (6) the data being migrated is not business-critical. A professional migration partner is recommended when: (1) you have more than 200 users, (2) you are migrating multiple workloads (email, files, Teams, SharePoint), (3) you operate in a regulated industry, (4) you require zero downtime, (5) you have custom applications or integrations, or (6) you are on a firm deadline (M&A, compliance audit, contract expiration). The breakeven point is typically around 200-300 users — below that, DIY can work; above that, the risk-adjusted cost of DIY exceeds professional engagement.
EPC Group's Migration Readiness Assessment is a fixed-fee engagement ($25,000 for organizations up to 5,000 users) that provides a complete migration plan before any data is moved. The assessment includes: (1) Source environment discovery — automated inventory of all users, mailboxes, SharePoint sites, Teams, OneDrive, custom applications, and integrations. (2) Data volume analysis — total data size, largest mailboxes, complex file structures, and estimated migration throughput. (3) Risk assessment — identification of migration blockers, compliance requirements, and technical complexity factors. (4) Migration architecture — recommended approach (coexistence vs. cutover), wave plan, timeline, and resource requirements. (5) Cost estimate — fixed-fee proposal for the full migration with no surprise costs. (6) Compliance mapping — for regulated industries, mapping of current compliance controls to the target environment. The assessment deliverable is a 40-60 page Migration Readiness Report that can be used to engage EPC Group or any other migration partner. It pays for itself by preventing the hidden costs described in this guide.
You can avoid all hidden costs mentioned in this guide. EPC Group provides a $25,000 Migration Readiness Assessment. This assessment helps you understand your migration needs clearly before transferring any data.
Start your migration with confidence, not uncertainty.
Last updated: 2026 · Read time: ~7 minutes
DIY Microsoft 365 migrations may seem inexpensive. However, hidden costs can raise the total expense to 3–5 times the estimated IT hours. This guide outlines all hidden cost categories, including:
It also compares the total cost of professional migration. This guide is authored by EPC Group, which has successfully migrated 3.7 million mailboxes.
The nominal cost of a DIY migration is IT staff hours. The actual cost includes six additional cost categories that most organizations do not budget for.
EPC Group sees the same failure patterns in every DIY migration rescue engagement. These are the items most commonly missed.
EPC Group's migration assessment produces six deliverables before any migration work begins. This is what prevents the hidden costs listed above.
DIY migration costs often include hidden expenses. These can arise from:
Four cost categories can increase the initial IT hours estimate by $80,000 to $980,000 or more. Consequently, the actual DIY cost may be three to five times higher than planned.
The most common data loss scenarios include:
Additionally, compliance holds that are not explicitly recreated in Exchange Online are also lost. This poses a significant risk for regulated industries.
EPC Group ensures data integrity through two key processes: item-count reconciliation and checksum verification. These steps are performed after each migration wave. We will not cut over any mailbox or SharePoint site until we finish the validation process.
The data-fidelity checklist — pre-cutover source-vs-destination item count, checksum sample verification, and permission mapping reconciliation — is documented in every migration Statement of Work.
Yes, this applies to most organizations with over 100 users or any compliance needs, such as HIPAA, SOC 2, or FINRA.
The fixed-fee professional migration cost is often equal to or less than the total DIY cost, including hidden expenses.
For regulated industries, the risk of compliance problems from a failed DIY migration can greatly exceed the cost of hiring professionals.
Talk to an EPC Group migration architect about your specific environment. Call (888) 381-9725 or request a 30-minute discovery call.
AI assistant — not human