Email archiving
Also known as: email archive, message archiving, email retention, email journaling
Email archiving automatically captures a secure, unchangeable copy of every business email in a searchable repository.
It supports legal and regulatory requirements, makes finding old messages fast, and preserves email even if a user deletes it or an account is lost. It is a separate function from backup, focused on long-term retention and discovery.
Email archiving, explained at three levels
At home
Think of email archiving as a records room with a photocopier at the door. Every letter that comes in or goes out is copied, filed, and locked away before anyone can throw the original out. Email archiving does the same for business email: the system keeps its own copy of each message, indexed so you can search years of mail in seconds, even after someone deletes it from their inbox.
At work
Email archiving is a separate system that captures a copy of every business email and keeps it unchanged for a set number of years. It matters because laws, lawsuits, and disputes often require you to produce old messages, including ones a former employee deleted. In Canada, the CRA generally expects business records, which can include email, to be kept for six years.
At home
An archive has three working parts. A capture step copies each message as it is sent or received. A storage layer saves those copies in write-once form, meaning they can be added but not edited. An index records the sender, recipients, dates, and words of every message so searches return in seconds. Because the archive sits outside your mailbox, deleting an email from your inbox, or even deleting the whole account, leaves the archived copy untouched.
At work
At work, an archive is run by policies rather than by people. A retention policy says how long each kind of mail is kept, for example seven years for finance, then deletes it on schedule. A legal hold freezes deletion for specific people or topics while a dispute is open. E-discovery tools search the archive and export matching messages, with a record of who searched and what was exported, so the results can be handed to lawyers or regulators.
At home
The key technique is journaling: the mail server sends the archive a copy of every message at the moment it passes through, before any user can delete or edit it. The archive then stores each message with a hash, a digital fingerprint that changes if a single character changes, which is how tampering is detected. While moving old mail into a folder feels like archiving, it proves nothing. In my view, only journaled, tamper-evident storage counts as a real archive.
At work
A mature archive captures mail by journaling from the platform, such as a journal rule in Exchange Online, or through native tools such as Microsoft Purview retention and eDiscovery. Storage is often WORM, meaning write once, read many, with role-based search, audit logs, and chain of custody for exports. Common failure modes are journal rules that miss some mailboxes and retention policies that delete too early. Archiving complements backup: one proves what was said, the other restores systems.
Real-world examples
At home
When a former employee's disputed emails became relevant to a client complaint, Marcus needed messages the ex-staffer had deleted months earlier. Because his MSP had email archiving in place, he searched the archive and produced the complete thread within minutes.
At work
Nadia's firm operates under strict record-keeping rules requiring years of email retention. Their archiving system journals every message into immutable storage, so during a regulatory review they could search, verify, and export exactly the correspondence requested, with a clear audit trail.
How it compares
| feature | Email backup | Email archiving |
|---|---|---|
| Primary purpose | Recover after failure/loss | Long-term retention + discovery |
| Storage type | Restorable copies | Immutable, searchable store |
| Survives user deletion | Depends on timing | Yes (captured on arrival) |
| Legal hold / e-discovery | Limited | Core feature |
| Typical driver | Disaster recovery | Compliance, litigation |
For analysts
If your industry has record-keeping rules or you ever face legal requests, archiving is not optional. Remember it's separate from backup: archiving proves what was communicated and retains it immutably, while backup restores systems and data after a failure.
History & origin
Regulations in finance, healthcare, and government began requiring businesses to retain email for years and produce it on demand, driving the growth of dedicated archiving systems in the 2000s. Litigation and 'e-discovery' obligations extended the need across industries. As email moved to the cloud, archiving became a managed service that MSPs offer to help small businesses meet retention rules without managing storage themselves.