How to Recovering "Lost" Cloud Files: A Complete Practical Guide

byLearntCard Team — 0
As a Workspace admin, you have access to recovery tools that standard users don't. These become critical when a user's account is deleted, files are permanently purged, or you need to recover data at scale. Recovering "Lost" Cloud Files: Google Workspace & Microsoft 365
Cloud Recovery Guide  ·  Google Workspace & Microsoft 365

Recovering "Lost" Cloud Files:
A Complete Practical Guide

Stop the panic. Start the recovery. Everything from accidental deletes to complex version rollbacks—explained for every skill level.
● Beginner ● Intermediate ● Advanced
Cloud storage visualization
Cloud storage sits between you and your data — understanding how it works is the first step to getting files back.

You open your laptop, navigate to the folder where you saved last week's proposal, and it's gone. Or perhaps a shared Google Doc your team spent three days building has been accidentally overwritten. Maybe you emptied the Recycle Bin too quickly. Whatever the cause, the stomach-drop of "lost" data is one of the most common — and most fixable — crises in modern work.

This guide walks you through the complete landscape of file recovery inside Google Workspace (formerly G Suite) and Microsoft 365 (formerly Office 365). Whether you've never looked beyond the Trash folder or you're ready to use PowerShell and admin APIs, every technique here is laid out step by step, with real-world scenarios and the exact clicks you need to make.

Before anything else: Stop writing to the drive or document. The more changes made after a file goes missing, the harder recovery becomes — especially for overwritten versions.

Understanding Why Files "Disappear"

Beginner

In both Google Workspace and Microsoft 365, files rarely vanish into nothing. What actually happens falls into a handful of predictable categories, and knowing which one applies tells you exactly where to look:

The Five Causes of "Lost" Files
  1. Moved to Trash / Recycle Bin — The most common case. Files are soft-deleted and retained for 30 days (Google) or 93 days (Microsoft) by default.
  2. Removed from a Shared Drive or moved by someone else — You still have access; the file just isn't where you expect it.
  3. Ownership transferred or account deleted — Files owned by a deleted user may be orphaned or cleared without warning.
  4. Overwritten by an earlier version — Version history can recover previous content even if the file still exists but has changed.
  5. Permanently deleted past retention period — Files purged beyond 30–93 days are gone from the standard UI; admin-level tools may still help.
Data recovery concept
Data doesn't disappear — it moves through predictable layers of storage that each offer different recovery windows.

Google Workspace Recovery — The Basics

Beginner Google Workspace

Google Drive is a forgiving system for anyone who knows where to look. The Trash folder is the first and most powerful recovery tool available to every user — no admin rights required.

Step 1: Search Your Trash

Google Drive's Trash holds every file you've deleted for 30 days before permanent purge. Here's how to check it:

  1. Open drive.google.com and sign in to the correct account (double-check you're not on a personal account if the file was in a work Workspace).
  2. In the left sidebar, scroll down and click Trash. On mobile, tap the three-line menu icon and select Trash.
  3. Use the search bar at the top — type the file name, or a keyword you remember from the document. Google searches Trash contents too.
  4. Right-click the file (or tap and hold on mobile) and select Restore. The file returns to its original location.
  5. If you can't find the original location after restoring, check My Drive — restored files default there if the parent folder was deleted.

Tip: Google Drive search supports operators. Try type:document, owner:me, or before:2024-01-01 in the search bar to narrow results inside Trash.

Recovering Files Deleted by Others in a Shared Drive

Beginner

Shared Drives (formerly Team Drives) have their own Trash that is separate from your personal Trash. Any member with Content Manager access or higher can restore files.

  1. Navigate to Shared Drives in the left sidebar of Drive.
  2. Click into the specific Shared Drive where the file lived.
  3. Click the small Trash icon near the top-right of the Shared Drive view (it appears as a bin icon next to the drive name).
  4. Select the file and click Restore.

Important: Members with only Viewer or Commenter access cannot restore from the Shared Drive Trash. If you lack permissions, contact your Workspace admin or a Content Manager for that drive.

Google Workspace — Version History Recovery

Intermediate Google Workspace

Sometimes the file exists but its content has been overwritten. A collaborator may have deleted paragraphs, a copy-paste went wrong, or an integration script wiped data. Version history is your time machine.

Using Version History in Google Docs, Sheets, and Slides

  1. Open the file in Google Docs (or Sheets/Slides).
  2. Click File → Version history → See version history. Keyboard shortcut: Ctrl+Alt+Shift+H (Windows) or Cmd+Option+Shift+H (Mac).
  3. The right panel shows a timeline of named and unnamed saves. Click any timestamp to preview that version's content.
  4. Use the colored highlighting to see who changed what — each collaborator's edits are shown in their assigned color.
  5. To restore a version, click the three-dot menu next to a version and choose Restore this version, or click the blue button at the top.
  6. The restored version becomes the current version. The previous "current" is saved automatically as a version entry so you won't lose it.

Named versions: You can name important versions (e.g., "Draft sent to client") via Version history → Name current version. Named versions are preserved indefinitely even as auto-saves cycle through older entries.

Version History for Google Drive Files (Non-Google Formats)

Intermediate

Files uploaded to Drive in non-Google formats (Word .docx, Excel .xlsx, PDFs, images) also maintain version history. This is especially useful when collaborators upload updated versions of the same file.

  1. Right-click the file in Google Drive and select Manage versions.
  2. You'll see a list of all uploaded versions. Click the three dots next to any version to download it.
  3. Google keeps up to 100 versions or versions up to 30 days old for non-Google files, whichever comes first.
  4. To restore an older version as the current one, download it, then re-upload it — or use the "Keep forever" toggle on key versions to prevent automatic pruning.
"Version history doesn't just save your work — it saves the conversation your team has been having with a document over time."

Google Workspace — Admin-Level Recovery

Advanced Google Workspace Admin

As a Workspace admin, you have access to recovery tools that standard users don't. These become critical when a user's account is deleted, files are permanently purged, or you need to recover data at scale.

Restoring Files After a User Account Is Deleted

When a user account is deleted in Google Workspace, their files are retained for 20 days before permanent deletion (this window can be extended by admins). Here's how to recover them:

  1. Log into the Google Admin Console at admin.google.com.
  2. Navigate to Directory → Users.
  3. At the top, click Recently deleted to find the deleted user.
  4. Click the user's name → Restore. This temporarily reinstates the account so you can access or transfer files.
  5. After transferring files to another active user (via Drive and Docs → Transfer ownership), delete the user account again.

Time is critical: After 20 days following account deletion, Google permanently deletes the user's data. There is no recovery mechanism after this point, even for admins. Set up Google Vault if your organization handles sensitive data.

Using Google Vault for Advanced Recovery

Advanced

Google Vault is an archiving and eDiscovery tool included with certain Workspace plans (Business Plus, Enterprise, and above). It can retain and export data beyond standard retention windows.

  1. Access Vault at vault.google.com (requires Vault admin privileges).
  2. Create a Matter (a container for your investigation) via Matters → Create matter.
  3. Add a Hold to prevent further data deletion on specific accounts or Shared Drives while recovery is in progress.
  4. Use Search within the matter to locate specific files or emails by account, date range, keyword, or file type.
  5. Click Export to create a downloadable archive of the recovered data. Exports include metadata, audit logs, and file content.
  6. Download the export from Exports in the sidebar. PST files (for email), MBOXes, and Drive files are delivered as ZIP archives.

Drive Audit Logs — Tracing What Happened

Advanced
  1. In the Admin Console, go to Reporting → Audit and investigation → Drive log events.
  2. Filter by Event name = "Delete" to see every deletion event in your domain.
  3. Add filters for Actor (who deleted), Date, or specific file names to narrow results.
  4. Audit logs help you pinpoint whether a file was deleted accidentally, or if access credentials were compromised. Logs are retained for 6 months.
# Using the Google Drive API to list files in Trash (Python example) from google.oauth2 import service_account from googleapiclient.discovery import build SCOPES = ['https://www.googleapis.com/auth/drive'] SERVICE_ACCOUNT_FILE = 'path/to/credentials.json' creds = service_account.Credentials.from_service_account_file( SERVICE_ACCOUNT_FILE, scopes=SCOPES) # Build the Drive service service = build('drive', 'v3', credentials=creds) # List trashed files for a specific user (admin delegation required) results = service.files().list( q="trashed=true", fields="files(id, name, trashingUser, trashedTime)", pageSize=100 ).execute() for f in results.get('files', []): print(f"{f['name']} — deleted by {f.get('trashingUser', {}).get('displayName', 'unknown')}")

This script (requiring service account credentials with domain-wide delegation) lists every trashed file with who deleted it — useful for auditing at scale before initiating bulk restoration via the API.

Microsoft 365 Recovery — The Basics

Beginner Microsoft 365
Microsoft Office interface
OneDrive and SharePoint provide layered recovery options — from Recycle Bins to administrator-level restoration tools.

Microsoft 365's recovery architecture is deeper than most users realize. OneDrive and SharePoint each have a two-stage Recycle Bin, version history, and — for enterprise plans — compliance and eDiscovery tools via the Microsoft Purview portal.

OneDrive Recycle Bin — First-Stage Recovery

  1. Sign in to onedrive.com (or open OneDrive in File Explorer/Finder and right-click → Open online).
  2. Click Recycle bin in the left sidebar.
  3. Find your file — sort by "Date deleted" if it's recent. Files are kept here for 93 days or until the bin reaches 10% of your total storage quota.
  4. Select the file(s) and click Restore at the top. Files return to their original location.
  5. To restore everything at once, click Restore all items — use with caution if you intentionally deleted other files.

Second-Stage Recycle Bin (SharePoint)

Intermediate

Items deleted from the first-stage Recycle Bin go to a second-stage bin that only site collection admins can access. This doubles your recovery window.

  1. Navigate to your SharePoint site. In the Recycle bin, look for the link at the bottom: "Second-stage recycle bin".
  2. This is also accessible via the Site Settings → Recycle bin → Show deleted items from end users' Recycle bins.
  3. Select the item and click Restore. It returns to its original position in the document library.
  4. Items in the second-stage bin are retained for the remainder of the original 93-day period.

Microsoft 365 — Version History and Files Restore

Intermediate OneDrive / SharePoint

Version History in Word, Excel, and PowerPoint

  1. Open the file in the Microsoft 365 web app (Word Online, Excel Online, etc.).
  2. Click File → Info → Version History. Or in the desktop app, click the file title at the top → Version History.
  3. A panel on the right shows all autosave snapshots. Click any version to open it as a read-only preview in a separate window.
  4. If you want to restore it, click Restore in the yellow banner at the top of the preview. This replaces the current version (and saves a new version entry of the replaced content for safety).
  5. You can also copy specific text from the old version into the current one if you only need to recover a section.

OneDrive "Files Restore" — Roll Back Your Entire Drive

Intermediate

OneDrive's Files Restore feature is one of the most powerful — and least-known — tools in Microsoft 365. It lets you roll back your entire OneDrive to any point within the last 30 days, undoing accidental mass deletions, ransomware damage, or a bad sync event.

  1. Go to onedrive.com and sign in.
  2. Click the Settings gear → Options → Restore your OneDrive. Or go to onedrive.com/restore.
  3. Choose a date range. An activity chart shows you which days had major changes — spikes often indicate mass deletions.
  4. Use the activity slider to preview exactly what will be restored. A list below shows every file that will be affected.
  5. Click Restore when satisfied. OneDrive processes the restoration — for large drives, this can take several minutes.

Best use case for Files Restore: Ransomware or malware that encrypted or deleted files will leave a distinctive spike in the activity chart. Rolling back to just before that spike recovers the full pre-attack state in one action.

Recovering Files from SharePoint Document Libraries

Intermediate
  1. Navigate to the SharePoint document library where the file was stored.
  2. Click the three dots (...) next to the library name → Restore this library.
  3. The restore experience mirrors OneDrive's Files Restore — choose a date point from the activity histogram.
  4. For individual file version recovery: click the three dots next to the file → Version history → select the version and click the arrow to restore.

Microsoft 365 — Admin and Compliance Recovery

Advanced Microsoft 365 Admin
Data center operations
Enterprise-grade recovery requires understanding how Microsoft 365 stores, retains, and archives data across its backend infrastructure.

Recovering Files from a Deleted User's OneDrive

When a Microsoft 365 user account is deleted, their OneDrive data is retained for 30 days by default (extendable to 180 days in admin settings). As a global or SharePoint admin:

  1. Log into the Microsoft 365 Admin Center at admin.microsoft.com.
  2. Go to Users → Deleted users.
  3. Select the user and click Restore user if within 30 days. This reinstates the account and all its data.
  4. To access data without restoring the full account, go to the SharePoint Admin Center → Sites → Search for the user's OneDrive URL (format: https://yourtenant-my.sharepoint.com/personal/username_domain_com).
  5. Click ... → Access this site to add yourself as a site collection admin, then browse and download the files.

Using PowerShell for Bulk Recovery

Advanced

PowerShell with the SharePoint PnP module provides scriptable, repeatable recovery operations that are impossible through the UI alone. Install the module first: Install-Module -Name PnP.PowerShell

# Connect to SharePoint Online Connect-PnPOnline -Url "https://yourtenant.sharepoint.com/sites/YourSite" ` -Interactive # List all items in the Recycle Bin Get-PnPRecycleBinItem | Format-Table -AutoSize # Restore a specific item by its ID (get ID from above command) Restore-PnPRecycleBinItem -Identity "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" # Restore ALL items deleted in the last 7 days $cutoff = (Get-Date).AddDays(-7) Get-PnPRecycleBinItem | Where-Object { $_.DeletedDate -gt $cutoff } | Restore-PnPRecycleBinItem -Force # Export Recycle Bin contents to CSV for review Get-PnPRecycleBinItem | Export-Csv -Path "RecycleBin_Audit.csv" -NoTypeInformation

Microsoft Purview (Compliance) — eDiscovery and Content Search

Advanced

Microsoft Purview (formerly the Microsoft 365 Compliance Center) provides eDiscovery tools for recovering and preserving content beyond standard retention windows — a requirement for legal holds and regulated industries.

  1. Access the Microsoft Purview portal at compliance.microsoft.com (requires Compliance Administrator role).
  2. Go to Content search under the eDiscovery section.
  3. Click New search. Specify locations (SharePoint sites, OneDrive accounts, mailboxes) and add keyword conditions (file names, content keywords, date ranges).
  4. Run the search and preview results. You can see files that still exist in retention but are no longer accessible through normal UI.
  5. Export results to download the actual files. Large exports are processed asynchronously and available in the Exports tab.
  6. For ongoing preservation, create a Retention policy or place a Legal hold on specific users to prevent future deletions during sensitive periods.
# PowerShell — Place all SharePoint sites on Litigation Hold # (Prevents permanent deletion during compliance investigation) Install-Module -Name ExchangeOnlineManagement Connect-IPPSSession # Create a new compliance case New-ComplianceCase -Name "Q3 Investigation" -Description "File recovery audit" # Add a hold on a specific user's OneDrive and mailbox New-CaseHoldPolicy -Name "Hold-UserA" -Case "Q3 Investigation" ` -ExchangeLocation "user@yourdomain.com" New-CaseHoldRule -Name "Hold-UserA-Rule" -Policy "Hold-UserA"

Special Scenarios and Edge Cases

Intermediate Both Platforms

Scenario: "I deleted a file I was sharing with others"

Real-World Scenario

Alex owned a shared Google Drive file. She moved it to Trash by accident. Her three colleagues can no longer access it. She empties Trash regularly — could the file be permanently gone?

Google Workspace: If Alex is the file owner and has emptied Trash, she should immediately contact her Workspace Admin, who has a 25-day window after permanent deletion to restore the file via the Admin Console (Admin → Users → Alex → Restore Drive). Collaborators who had the file open may also have a cached offline version in their browser's cache or local Docs folder if offline sync was enabled.

Microsoft 365: In SharePoint/OneDrive, if the file was in a shared location and deleted, any member with the right permissions can restore from the second-stage Recycle Bin. If it was in Alex's personal OneDrive, the site collection admin must intervene.

Scenario: "A sync client wiped my files"

Real-World Scenario

Marcus reinstalled Windows and reconnected his OneDrive sync client to a new device. The sync process detected a conflict and "won" by deleting 400 files from the cloud to match the empty local folder. He noticed within hours.

This is exactly what OneDrive Files Restore was designed for. Because the deletions all happened within a narrow time window, the activity chart will show a sharp spike. Marcus should use Files Restore to roll back to the point just before the sync event — all 400 files will return. This scenario is also where Google Drive's activity dashboard (right-click a folder → View activity) can help identify the exact timestamp of mass changes.

Scenario: "Someone overwrote an entire Google Sheet"

Real-World Scenario

A junior team member pasted data into the wrong Google Sheet, replacing three months of financial records. The file still exists. The original data needs to come back.

  1. Open the file and go to File → Version history → See version history.
  2. Scroll back in the timeline to before the overwrite occurred. You can identify the moment by the timestamp and the collaborator color highlighting.
  3. Rather than restoring the whole version (which may overwrite other valid recent changes), click on the correct version, then select all the original data range and copy it.
  4. Open a new Google Sheet, paste the copied data to confirm it's correct.
  5. Then paste selectively back into the current Sheet.

Scenario: "The file is there but all my content is gone"

Intermediate

Sometimes a file appears intact but is effectively empty — this can happen when a script, integration, or automation runs clear() or delete() on a document's content rather than the file itself. Both platforms handle this via version history since the file's metadata (name, ID, sharing settings) was never deleted — only its content changed.

For Google Docs: The version history will show the complete history of content changes. Look for the version just before the content was wiped and restore it.

For Microsoft Word Online: The Version History panel will have an autosave snapshot from before the wipe occurred, as long as the file was saved to OneDrive or SharePoint and AutoSave was enabled (it is on by default for cloud-stored files).

Platform Comparison: Recovery Capabilities

Intermediate
Feature Google Workspace Microsoft 365
Trash retention 30 days (personal); Shared Drive = 30 days 93 days (OneDrive/SharePoint)
Version history ✓ Unlimited for Google formats; 100 versions / 30 days for uploads ✓ Unlimited autosave snapshots on OneDrive/SharePoint
Second-stage bin ✗ Not available (admin only recovery) ✓ Available to site collection admins
Bulk drive rollback ✗ Not natively; requires admin/API ✓ Files Restore (30-day window)
Deleted user data window 20 days after deletion 30 days (extendable to 180)
Archiving / eDiscovery ~ Google Vault (Business Plus+) ✓ Microsoft Purview (Enterprise)
Admin audit logs 6-month retention 90 days (standard) / 1 year (E3+)
API recovery tools ✓ Drive API v3 with full trash access ✓ SharePoint REST API, Microsoft Graph, PnP PowerShell
Mobile recovery ✓ Drive app has Trash access ✓ OneDrive app has Recycle Bin access

Prevention: Building a Recovery-Ready Environment

Intermediate Both Platforms
Data backup and prevention
Prevention and preparation reduce recovery from a crisis to a routine. Build habits and policies before the panic sets in.

Recovery is reactive. Prevention is a strategy. These practices take 30 minutes to set up and can eliminate most cloud file loss scenarios entirely:

For Google Workspace

Individual users
  • Name important versions (File → Version history → Name current)
  • Enable offline sync for critical folders in Drive settings
  • Never permanently delete files immediately — let them age in Trash
  • Use shared drives for team documents, not personal My Drive
  • Star (☆) important files for quick location after accidental moves
Admins & teams
  • Set up Google Vault if on Business Plus or Enterprise
  • Configure default Trash retention in Admin → Apps → Drive → Trash
  • Enable Drive activity alerts for mass deletions via Admin audit
  • Assign Content Manager roles on Shared Drives thoughtfully
  • Back up critical data with Google Takeout or Workspace APIs quarterly

For Microsoft 365

Individual users
  • Ensure AutoSave is ON (look for the toggle top-left in desktop Office apps)
  • Save files to OneDrive or SharePoint, not local drives, for version history
  • Check sync status before closing — the OneDrive icon in taskbar should show a green checkmark
  • Don't empty Recycle Bin immediately after large file operations
  • Use "Save a copy" before making major edits to shared files
Admins & teams
  • Extend deleted user data retention to 180 days in SharePoint Admin
  • Configure Microsoft Purview retention policies for critical document libraries
  • Enable version limits in SharePoint library settings (500 versions max)
  • Use Microsoft 365 Backup (preview feature) for point-in-time recovery
  • Monitor the Microsoft 365 Defender portal for unusual mass deletion events

Advanced Tools and Third-Party Options

Advanced

Automated Backup Solutions for Cloud Data

Neither Google Workspace nor Microsoft 365 is a backup service — they are productivity platforms with recovery features. For true backup (independent copy, air-gapped from the primary system), consider dedicated solutions:

Enterprise-Grade Backup Options
  1. Veeam Backup for Microsoft 365 — Industry-standard backup for Exchange, SharePoint, OneDrive, and Teams. Supports point-in-time restore for individual items and provides an independent copy outside Microsoft's infrastructure.
  2. Backupify (by Datto) — Cloud-to-cloud backup supporting both Google Workspace and Microsoft 365. Stores three daily snapshots indefinitely, allowing restores from any historical point.
  3. Avepoint Cloud Backup — Comprehensive Microsoft 365 backup with granular item recovery, supporting over 30 Microsoft 365 services including Teams, Planner, and Project.
  4. SpinOne — AI-powered backup that also monitors for ransomware and risky third-party apps. Particularly useful for SMBs managing Google Workspace.
  5. Microsoft 365 Backup (native) — Microsoft's own backup product (still rolling out as of this writing) offers tenant-wide backup with 1-year retention for OneDrive, SharePoint, and Exchange at a per-user cost.

Using Microsoft Graph API for Recovery at Scale

Advanced

The Microsoft Graph API provides programmatic access to OneDrive and SharePoint data, including deleted items. This is valuable for building automated recovery workflows or auditing deletions at scale.

# Get access token using client credentials flow $tenantId = "your-tenant-id" $clientId = "your-app-client-id" $clientSecret = "your-client-secret" $body = @{ grant_type = "client_credentials" scope = "https://graph.microsoft.com/.default" client_id = $clientId client_secret = $clientSecret } $tokenResponse = Invoke-RestMethod ` -Uri "https://login.microsoftonline.com/$tenantId/oauth2/v2.0/token" ` -Method POST -Body $body $token = $tokenResponse.access_token $headers = @{ Authorization = "Bearer $token" } # List items in a user's OneDrive Recycle Bin $userId = "user@yourdomain.com" $recycleBin = Invoke-RestMethod ` -Uri "https://graph.microsoft.com/v1.0/users/$userId/drive/items/root/children?filter=deleted ne null" ` -Headers $headers # Restore a specific item by ID $itemId = "01XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX" Invoke-RestMethod ` -Uri "https://graph.microsoft.com/v1.0/users/$userId/drive/items/$itemId/restore" ` -Method POST -Headers $headers

Google Apps Script for Automated Recovery Checks

Advanced

Google Apps Script can run on a schedule to monitor for mass deletions and alert admins before the recovery window closes.

// Google Apps Script: Alert on mass trash events // Run this as a time-based trigger every hour function checkForMassDeletions() { const adminEmail = "admin@yourdomain.com"; const threshold = 20; // Alert if more than 20 files trashed in 1 hour const now = new Date(); const oneHourAgo = new Date(now.getTime() - 60 * 60 * 1000); // Query Drive activity for trash events const response = DriveActivity.Activity.query({ filter: `time > "${oneHourAgo.toISOString()}" AND detail.action_detail_case:DELETE`, pageSize: 100 }); const activities = response.activities || []; if (activities.length >= threshold) { MailApp.sendEmail({ to: adminEmail, subject: `⚠️ Alert: ${activities.length} files moved to Trash in last hour`, body: `Mass deletion detected at ${now.toLocaleString()}.\n\nFiles affected: ${activities.length}\n\nReview the Drive audit log immediately and restore from Trash before the 30-day window expires.` }); } }

Recovery on Mobile Devices

Beginner Both Platforms

Mobile recovery is more limited than desktop but is often the fastest path when you notice a deletion on the go.

Google Drive App (iOS and Android)

  1. Open the Google Drive app.
  2. Tap the three-line menu (hamburger icon) in the top left.
  3. Scroll down and tap Trash.
  4. Tap and hold the file you want to restore, then tap the three-dot menu → Restore.
  5. Version history for Google Docs on mobile: Open the file → tap the three-dot menu → Version history. This opens a simplified timeline view.

OneDrive App (iOS and Android)

  1. Open the OneDrive app.
  2. Tap the Me icon (bottom right on iOS, top left on Android) → Recycle bin.
  3. Tap the file → Restore. Note: Files Restore (the bulk rollback feature) is only available in the browser, not the mobile app.
  4. For version history on mobile, open the file in the Word/Excel/PowerPoint mobile app → tap the file name at the top → History.

Emergency Recovery Checklist

Beginner Both Platforms

Print this or save it somewhere accessible for the moment panic sets in. Work through it in order:

🔴 File Missing — What to Do Right Now
  1. Stop and don't touch anything. Don't upload, delete, or overwrite anything else until you understand what happened.
  2. Search Drive/OneDrive thoroughly — including Shared Drives / SharePoint sites the file may have been moved to.
  3. Check Trash / Recycle Bin on the platform and restore if found.
  4. Check Version History if the file exists but content is wrong or missing.
  5. Ask collaborators — someone with access may have the file open, a local copy, or offline cache.
  6. Use Files Restore (M365) or request admin help (Google Workspace) for bulk events.
  7. Contact your IT/admin team — they have 20–30 days from the deletion event to act with admin tools before data is truly gone.
  8. Check email — if the file was ever shared via link, Drive/OneDrive often preserves a copy in the sharing notification email.
  9. Check browser cache and offline sync folders for any locally cached versions on your machine.
  10. Escalate to eDiscovery/Vault only if all other options fail and compliance data is critical.

Recovery techniques and retention windows described here are accurate as of publication. Google Workspace and Microsoft 365 update their features regularly — consult your platform's support documentation for the latest retention policies, especially following account tier changes.

Tags:

Post a Comment

Post a Comment

Previous Post Next Post