AI agent deletes M365 files? Veeam aims to roll back selectively

Veeam Software has announced the general availability of Veeam Intelligent ResOps for Microsoft 365 and introduced the new features at its virtual VeeamON Global Launch event. The add-on for Veeam Data Cloud for Microsoft 365 is designed to identify which AI agents access data in SharePoint, OneDrive, Teams and Exchange, and, when needed, roll back their changes file by file. It is the first generally available product in the new Intelligent ResOps (iResOps) family. Private previews are also underway for the self-managed Veeam Data Platform and the Okta identity service.

Veeam CEO Anand Eswaran cited a case in Spain in his keynote to explain the move. On Sept. 14, 2026, Spain’s data protection authority, AEPD, made public the first data-breach report it had received in which an AI agent deployed by a third party allegedly searched for vulnerabilities, altered personal data and accessed invoices. According to AEPD, the information came from the affected organization and is still being reviewed. To report an incident within 72 hours, a company needs to know which records changed, what they contain now and what they looked like before, Eswaran said. A restore point doesn’t answer those questions; companies also need a “restoration map” showing what should and shouldn’t be rolled back.

The system is built on the DataAI Command Graph of the DataAI Command Platform . It is designed to connect production data with backup context and map files, users, permissions, agents and protection status to one another. The data security and governance features come from Securiti AI, according to the press release. Existing products such as Veeam Data Platform and Veeam Kasten will be connected to the platform, Eswaran said.

According to the company , the add-on tracks known and unknown agents, including Copilot, and shows which sensitive data they access and which files they changed or deleted . Redundant, obsolete and trivial (ROT) data can be moved to quarantine. In a Spotlight session, Field CTO Brad Linch demonstrated policies that automatically flag files containing account or credit card numbers and block Copilot from accessing them, along with a timeline of captured agent actions that lets users restore individual deleted files.

Private-preview customers had found 25 agents in a single tenant, two of which were actively changing data, Veeam said. Other customers had searched for data related to DORA or the GDPR. According to the 2026 Data Trust & Resilience Report published by Veeam, 88% of companies were using or testing AI agents, but only 7% were considered AI-ready. The add-on is available in two editions and through Veeam Cloud & Service Provider (VCSP). Foundation costs $2.49 per user per month, according to the product page; Advanced, which adds enhanced classification and sensitive-data labeling, costs $4.99. Both prices are for annual billing.

The session “Designing Data Resilience for the Modern Enterprise” focused on the current version, 13.1, of the Veeam Data Platform. Rick Vanover, vice president of technical marketing, and Field CTO Emilee Tellez demonstrated the now generally available Active Directory Forest Recovery , which restores an entire forest from image backups of domain controllers. The guided recovery currently supports domain controllers from VMware vSphere and Microsoft Hyper-V backups; those same two virtualization platforms are also available as recovery targets. New features include update settings for Windows backup servers that install security updates by default within 30 days, as well as the Application Backup Repository, a Veeam-managed NFS for applications without their own integration. The Veeam Intelligence assistant adds two agents for in-depth malware analysis and backup administration. For migration to the Veeam Software Appliance, the company points to Knowledge Base article KB4800 .

Todd Vancil, vice president of systems engineering, and Ben Young, Field CTO for APJ, showed a new version of the plug-in for Palo Alto Networks Cortex, which is available in the marketplace. It turns results from backup scans, alerts from a recon scanner in the backup infrastructure and findings from the Security & Compliance Analyzer into incidents. Playbooks can launch scans with YARA rules, quick backups or instant recoveries, among other actions. In another demo, an EDR system automatically triggered backups of Entra ID and file servers after detecting a ransomware note.

The private preview for the Veeam Data Platform lets users connect existing Backup & Replication servers (VBR) to the DataAI Command Platform without migrating data. Data stays local, while a cloud console displays the entire VBR fleet, including environments running Hyper-V, VMware and Nutanix, and warns servers with insufficient resources. Three agents for dashboards, graphs and backup administration expand the console. The feature is expected to arrive with Veeam Data Platform v13.2, which Veeam expects to make generally available in the fourth quarter of 2026.

iResOps for Okta is a fully managed service. Okta offers no native point-in-time recovery and gives users only a 30-day soft-delete window, Veeam argues. The service creates immutable restore points for 29 object types, checks each object’s recoverability through the live API and, during a rollback, restores memberships, app assignments and roles in the correct order. Veeam already offers identity resilience for Active Directory and Microsoft Entra ID.

Private previews for GitHub and Azure DevOps are due in the fourth quarter of 2026, covering code, pipelines, settings and permissions; a preview for Google IAM is also planned. Rehan Jalil, president of products and technology, named Google Workspace, AWS IAM and GitLab, among others, as other potential candidates, without providing timelines. Veeam said the features in private previews may still change before release.

This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.