Your accounting package, CRM, file-sharing service or Microsoft 365 tenancy may hold years of client records, emails, invoices and project history. Cancel it in the wrong order and your staff can lose access before the business has a copy it can actually use. The fix is simple: get your data out, check it, move everything that depends on the service, and only then cancel.
Cancelling is not the same as moving out
Providers treat data differently when a subscription ends. Some stop users signing in straight away but give administrators time to retrieve data; some switch to read-only; others start deleting sooner than you might expect. Billing may also continue until the end of an annual or fixed-term contract, and a service bought through a reseller can follow a different process from one bought directly.
There is no general rule to rely on. The safe answer is the one in your provider's current documentation and your contract.
What Microsoft 365 does when a subscription ends
Microsoft's guidance shows how detailed these rules can be. It says a business subscription generally moves through a series of statuses after it ends (Active, Expired, Disabled and finally Deleted), though some subscriptions skip the Expired stage. According to Microsoft:
- In the Disabled status, users can no longer use the Microsoft 365 apps, and only administrators can access and back up the organisation's data.
- If you cancel within the cancellation window, the subscription goes straight to Disabled. Data you leave behind is deleted after a set period; Microsoft's page gives the current timings.
- If an administrator explicitly deletes a subscription, it skips the Expired and Disabled statuses, and SharePoint and OneDrive content is deleted immediately.
- Once a subscription is Deleted it cannot be reactivated, and buying a new subscription of the same type does not bring the old data back.
Microsoft adds that the time in each status depends on how you bought the subscription: directly, through a Volume Licensing agreement, or through a Cloud Solution Provider (CSP) partner, which has its own lifecycle rules. Its advice is to back up your data before you cancel. If you are unsure how your licences were bought, our Microsoft 365 team can check before you set any dates.
Google gives similar advice for Workspace, and notes that data in connected third-party apps is not deleted automatically when you cancel, so those apps need their own clean-up.
Five checks before you cancel
1. Read the terms and set the dates
Give one person ownership of the move. They should find out, in writing where possible:
- when staff access stops, and whether administrators keep access for longer
- how long data stays available, and when it is deleted
- what the export includes, and whether it must be requested before cancellation
- when billing stops, and whether the account can be reactivated
- whether the provider will confirm deletion in writing
If the documentation does not answer these questions, ask the provider and keep the reply. Then work backwards from the final date, leaving time to export, test, train staff and fix anything that breaks. Knowing who owns each important account makes this much easier; we covered that in why clear account ownership matters.
2. Export everything the business needs
List what the service holds: client details, documents, emails, calendars, invoices, tickets, reports, audit records. Then read the provider's export documentation; a standard export often covers the main records but leaves out attachments, comments, permissions, deleted items, settings, automation rules or activity history.
Use a business-owned administrator account to run the export, and save the files somewhere the business controls, not in one employee's personal downloads folder. Large exports can take time to prepare, so start early.
3. Open and test what you exported
An export you have not opened is not yet a copy you can rely on. Open a sample of every file type. Check that attachments are there, dates are right and text is readable.
Watch out for lost relationships. A CSV file can hold every name and number but drop the links between them, so your clients and their invoices end up in separate files with nothing tying them together.
If you are moving to a new system, import a small batch first and ask the people who use it daily to check names, notes, open tasks, custom fields and past transactions. Move the rest once they are happy.
4. Move connected apps and sign-ins
Cloud services rarely work alone. A website form may send enquiries into your CRM, and reports, payment notifications and scheduled tasks may depend on the service you are closing. List everything that sends data in or takes data out, including mobile apps, browser extensions, automated workflows and API connections. Move or switch off each one, then test that new records arrive where they should.
Sign-ins need the same care. If staff use "Sign in with Microsoft" or "Sign in with Google" to reach other applications, closing that account can lock them out. Add another sign-in method first, and make sure the business, not an individual, controls the administrator and recovery details for each account.
5. Keep what you must, and record what you did
Some records, such as accounts, contracts and staff files, may need to be kept for a period after you stop using a service. Ask your accountant or adviser before deleting anything you may still need.
Keep a short record of what was exported, when, who checked it and where it is stored, along with the cancellation confirmation, final invoice and any correspondence about deletion. Decide how long you will keep the exported files and delete them securely when they are no longer needed.
After you cancel: access and deletion
Cancelling a subscription and deleting an account can be two separate steps, so check whether you need to do both.
Ask the provider what happens to live data, deleted items, backups and audit logs, and whether subcontractors hold your information. Data removed from live systems may remain in backups until they expire, and some records may be kept for billing, security or legal reasons. Ask what will remain, why, and for how long.
Once the move is complete, revoke old integrations, API keys and access tokens, remove accounts you no longer need, and, for important systems, ask for written confirmation that your data has been deleted. For future contracts, the UK's National Cyber Security Centre recommends that supplier contracts set out how your information and assets will be returned and deleted when the contract ends or moves to another supplier.
Frequently asked questions
How long will a provider keep our data after we cancel?
There is no standard period. It depends on the provider, the plan, your contract and how you bought it. Check the current documentation, and get written confirmation for important systems.
Is an export the same as a backup?
It can serve as your retained copy if it contains what you need, opens correctly and is stored securely. Some exports leave out settings, permissions, relationships or audit records, so test before you rely on one.
Can we reactivate the service later?
Some providers allow reactivation for a period; others do not. Microsoft, for example, says a deleted Microsoft 365 subscription cannot be reactivated. Export and test first.
Will billing stop as soon as we cancel?
Not always. Monthly plans, annual commitments and reseller agreements can each follow different rules. Confirm the final payment date and the last day of service before you approve the cancellation.
Sources and further reading
- Microsoft Learn: What happens to my data and access when my Microsoft 365 for business subscription ends?
- Microsoft Learn: Data retention, deletion, and destruction in Microsoft 365
- Google Workspace Admin Help: Cancel Google Workspace
- NCSC: Supply chain security, establish control
If you are planning to leave a cloud service or change how your business uses Microsoft 365, our engineers can check the export, connected apps and staff sign-ins with you before anything is switched off. Find out more about our managed IT services or talk to our team.
