Per-Tenant EncryptionEach tenant gets a unique AES-256-GCM key derived via scrypt. Data stays encrypted even if storage is breached.
Content-Addressed DeduplicationMessages and attachments are stored by SHA-256 hash per mailbox. Identical files are stored once.
Storage-Level ImmutabilityS3/MinIO Object Lock with time-based retention enforced by storage itself, not app metadata.
Delta SyncMicrosoft Graph delta queries for incremental backups with automatic full-scan fallback on interrupted runs.
EML ExportSave backed-up emails as standard .eml files in compressed zip archives with Outlook-compatible folder structure.
Typed SDKProgrammatic API for embedding in other Node.js applications via the m365-atlas/sdk subpath.