How to Run a Google Workspace Backup Health Review Without Extra Tools. Google Workspace includes retention controls and restore options, but these don’t equate to full coverage. In this video, we’ll walk through how to conduct a structured Google Workspace backup health review. Before we begin, be sure to subscribe to NinjaOne’s IT video hub and our YouTube channel for more tech content like this. How to Run a Google Workspace Backup Health Review. Before we begin, a quick disclaimer: API-based spot checks and the Google Workspace Data Export Tool are considered extended or break-glass options, and they’re covered in full detail on our blog. Step 1: Define Scope and Recovery Objectives. Begin by inventorying all protected data sources, including Gmail, Drive, Calendar, Contacts, Shared Drives, active users, suspended accounts, and recently deleted users. Next, define your Recovery Point Objective (RPO) and Recovery Time Objective (RTO) and document this scope and the defined recovery targets in a one-page reference sheet. Step 2: Validate Retention and Legal Holds in Google Vault. Review Vault retention policies and check that default and organizational rules align with compliance requirements. Navigate to Admin Console, Apps, Google Workspace, Google Vault. Navigate to Vault, Retention and review retention rules for Gmail, Drive, Chat, and Meet recordings. Next, open Vault, Holds to verify that executive, HR, finance, and legal accounts have properly scoped holds applied. Step 3: Confirm Native Restore Capabilities Without Vault. Validate each restore path directly in the Admin Console. For admin-level restores, navigate to these paths: For Gmail restores: Admin Console, Users, Select User, Restore Data, Gmail, Choose date range For Drive restores: Admin Console, Users, Select User, Restore Data, Drive, Choose date range For user-level restores, use these paths: For Calendar restores: Google Calendar web, Settings, Trash, Restore Events For Drive restores: Google Drive, Trash, Restore Item Keep in mind that Admin-level Gmail and Drive restores are limited to data that was permanently deleted within the previous 25 days. After that window, the data can't be recovered using native restore tools. Step 4: Test Account-Level Recovery. Simulate real-world scenarios such as accidental deletion or offboarding. To undelete a user, navigate to Admin Console, Users, Recently Deleted, Restore. Then, verify the following: Drive file ownership Shared Drive membership Access permissions If needed, go to Admin Console, Apps, Google Workspace, Drive and Docs, Transfer Ownership. Make sure to document restore time and any manual intervention required. Step 5: Audit Risky Activity. For this step, open Admin Console, Security, Audit and Investigation. First, Run a Drive audit search and filter for: Delete, Empty trash, Ownership changes, Bulk or external sharing Next, run an Admin activity audit and filter for: Retention rule changes, Sharing policy updates, Vault configuration changes Step 6: Perform Controlled Deletion-and-Restore Exercises. Using your test accounts, try deleting non-critical test items across Gmail, Drive, and Calendar. Restore each item using native recovery paths and record the time required. Confirm that restored items are complete and functional. Step 7: Create a Gap Registry and Action Plan. After completing testing and validation, compile all identified issues into a formal gap registry. This may include insufficient retention coverage, Shared Drives without managers, restore limitations, or risky deletion patterns. Each gap should include a risk rating, owner, due date, and its impact on RTO or RPO objectives. Any Google Workspace backup health review without extra tools requires clear recovery objectives, retention validation, restore testing, risk auditing, and documented remediation. For more information, check out our official blog post on how to run a Google Workspace backup health review without extra tools, linked in the description below.