A quarterly manual email backup looks like compliance, but it leaves gaps wherever mail is deleted, moved or sent between copy runs. This is a composite, anonymised account of an eight-person Australian bookkeeping practice. It ran that process for three years, found the gaps when a client dispute needed a specific email, and replaced it with continuous automated capture.
The client was disputing an instruction about a BAS lodgement. The firm knew the email existed. It had been sent in the first quarter of the previous year, and the partner could remember reading it. Nobody could find it in the backups.
What the manual process looked like
Every quarter, the office manager copied each staff member's mailbox folders to an external drive and a shared folder. She did it after the BAS season rush, usually on a Friday afternoon, and it took most of a day. She had inherited the job from a previous contractor and had never been told what it was for. She knew only that it mattered.
On paper, this was sensible. The firm has record-keeping duties under the Tax Agent Services Act regime. The ATO expects records to be kept for five years, and the Corporations Act sets seven years for some financial records. Email is where engagement instructions, client approvals and queries about odd transactions actually live.
What broke
The problems were unglamorous, and none of them announced themselves.
- The copy only captured what existed that day. An email deleted in week three of a quarter was never in any backup. Staff routinely cleared sent items and "Deleted" folders to stay under mailbox limits.
- Coverage was inconsistent. Two staff members' folders were skipped for several quarters because they had been renamed. A part-timer's mailbox was never added.
- Exports became PST files, and nobody could search them. Finding one email meant opening years of files one at a time. The firm's own situation matched what we describe in PST files as a hidden compliance time bomb, including one file that would no longer open.
- The process depended on one person. When the office manager went on leave one quarter, the copy simply didn't happen. Nobody noticed until later.
- Nothing proved the copies were untouched. Anyone with access to the shared folder could edit or delete files, and that weakens the archive's value as evidence.
The missing email turned out to have been deleted by a staff member in the same quarter it arrived. It was in the live mailbox for about five weeks and in no backup. The firm resolved the dispute through a phone record and the client's own forwarded copy, which was lucky. It also spent roughly two days of a partner's time reconstructing what should have taken minutes. That cost is typical of the pattern described in what email archiving failures actually cost a firm.
The after-state
The firm moved to AutoArchive Mail, which connects to each mailbox and copies every message, sent and received, into a separate archive as it arrives. Capture is continuous, so a deletion in the live mailbox no longer removes the only copy.
Here is what changed in practice:
- Setup took an afternoon. The firm connected all eight mailboxes plus two shared inboxes, including the part-timer's, and ran an import of the existing mail history.
- Nobody copies folders any more. The office manager's quarterly task became a five-minute check that every mailbox shows as connected and receiving mail.
- Search replaced file-hunting. A search by client name, sender and date range returns results across all mailboxes at once, with headers and attachments intact.
- Staff deletions don't affect the archive. Tidying a mailbox is now just tidying a mailbox.
- The archive is separate from the working mailboxes. It is a distinct store with its own access controls, and that is what makes it credible as a record.
Staff departures also got easier. Under the old process, a leaver's mailbox was either copied in a rush or deleted with the licence. Now it is already archived. If the firm ever changes email provider, the archive is not tied to it, which is the situation covered in switching email providers without losing your archive.
What this does and doesn't prove
The manual process wasn't irresponsible. For a three-person practice with a short history and one careful person doing the copying, a documented quarterly backup can be adequate. It failed here because the firm grew, mailboxes multiplied, staff habits varied and one person carried the whole process.
If you recognise your own setup in this, the quickest test is to pick an email from eighteen months ago that someone has since deleted. See whether you can find it, and how long that takes. If you want to try the alternative, you can Start Free Trial on one or two mailboxes first and compare the result with your current backup.
What this article doesn't cover
This is one firm's experience, with details anonymised, and it isn't a guarantee of results. Automated capture covers email from the day it's connected plus whatever history you import. It doesn't recover mail that was already deleted everywhere. It also doesn't replace advice from your professional body or a lawyer on how long your specific records must be kept.
Ready to automate your email archiving?
AutoArchive Mail captures every email automatically — incoming and outgoing — with clean filenames and full .MSG preservation. 14-day free trial, no credit card required.
Start Free Trial See How It Works