The shared responsibility gap, in plain terms
Microsoft guarantees the availability of the service, not the recoverability of your content. Retention and litigation hold are not backup: once a retention window passes, or a licence is removed, or an attacker with admin rights purges data, Microsoft cannot bring it back. That gap is yours to close.


