Small Business Data Management in Houston: Which Copy Is Right?

Most small businesses keep the same records in four places, and every copy drifts.

Business data in a small office usually lives in four places at once: email attachments, personal OneDrive folders and desktops, shared SharePoint or Teams sites, and line-of-business apps such as accounting or practice management software. Each copy drifts from the others, and the most complete version is often sitting in one person's OneDrive.

A typical drift looks like this. A shared drive stopped being used when the office moved to Microsoft 365, a Teams site appeared for every project, and the working files ended up on the owner's laptop. Nothing is lost yet, but nobody can say which copy counts.

Texas law adds a deadline. Under Texas Business and Commerce Code Section 521.053, a business that suffers a breach of sensitive personal information must notify affected individuals no later than the 60th day after it determines the breach occurred, and must notify the Texas Attorney General within 30 days when at least 250 Texans are affected. A Houston company that cannot say which folders held customer Social Security or account numbers spends that window searching instead of notifying.

The fix starts with a one-page map: each kind of record, where its official copy lives and who owns it. That page is the first step of any small business data cleanup.

Eight steps, each small enough to finish in a day or less.

A small business data cleanup takes about a week when it sticks to eight steps: map the records, name owners, pick one home per record type, move shared files out of personal folders, set group permissions, archive stale files, confirm backup coverage and publish the map.

• Map the records: list each kind of record, such as contracts, client files, invoices, HR files and project documents, and where its official copy lives today.
• Name an owner for each one, a person rather than a department, who decides what is kept and who can see it.
• Pick one home per record type, usually a SharePoint document library, and write it down.
• Move shared files out of personal OneDrive folders and desktops into that home, starting with anything a former employee worked on.
• Set permissions by group rather than by person, so access follows the role when people change jobs.
• Archive files nobody has opened in a year to a read-only location instead of deleting them.
• Confirm that a backup covers Microsoft 365 mail and files, not just laptops and servers.
• Publish the one-page map so staff know where to save and where to look.

The first three steps take a morning with the owner and the office manager. Moving files takes the longest, so start with the record types that would hurt most to lose. Skip the urge to buy a new platform first: in most Microsoft 365 offices the cleanup runs on the SharePoint the business already pays for, once someone owns it.

Recycle bins and retention windows buy time. A backup is a separate copy.

Microsoft 365 retention is not the same as a backup. Deleted SharePoint and OneDrive items stay in the recycle bins for 93 days, and Exchange Online keeps deleted email for 14 days by default, up to 30. After those windows close the items are gone, and under Microsoft's shared responsibility model the customer always keeps responsibility for its own data.

Those windows cover the everyday mistake, such as a file deleted on Monday and missed on Tuesday. They do not cover a deletion nobody notices until the window has closed, and they sit inside the same Microsoft 365 account as the files they protect.

The table compares the three safety nets a Microsoft 365 office usually has.

The fix for this part is one question to whoever runs IT: does our backup cover Microsoft 365 mail and files, and when was a restore last checked? The CinchOps Microsoft 365 backup service keeps immutable, offsite copies outside the Gulf Coast flood zone and verifies the backups.

CinchOps is a managed IT services provider based in Katy, Texas, serving small and mid-sized businesses across the Houston metro area. CinchOps specializes in cybersecurity, network security, managed IT support, VoIP, and SD-WAN for businesses with 10 to 200 employees.

• IT side: SharePoint services build the document libraries and group permissions, and OneDrive for Business management moves shared files out of personal folders.
• Backup: Microsoft 365 backup and backup and disaster recovery keep immutable, offsite copies outside the Gulf Coast flood zone.
• Business side: CTO/CIO services help the owner decide which records matter, who owns each one and how long to keep it.
• Local coverage: CinchOps works with businesses in Houston, Katy and Sugar Land, including CPA firms, law firms and engineering firms.

Messy data does not sort itself out, and it gets harder to untangle with every new hire and every new app. Pick one kind of record this week, give it a home and an owner, and talk to CinchOps if you want help with the rest.