Former employee mailboxes in Microsoft 365: cut license cost without losing records

Preserve the mailbox first, then remove the license

The saving is real and the risk is in the order of operations. Preserve the former employee's mailbox, confirm it is preserved, and only then remove the license or delete the account. Reverse that order and the mailbox can be gone for good once the recovery window for deleted users passes.

For a CFO running a license true-up, this is an easy saving with one trap. The seat is a cost line; the mailbox is often the only complete record of what that person did, who they dealt with and how each decision turned out.

Which option fits a former employee's mailbox?

Microsoft 365 offers more than one way to keep a departed user's email. The right one depends on whether anyone still needs to work in that inbox.

Microsoft's own documentation, together with your IT administrator or managed service provider, is the authority on current licensing requirements and limits. Read it the week you decide, because plan terms change.

Why the mailbox is worth more than its compliance value

Email is where much of the real work of a mid-sized company still happens. A departed account manager's inbox shows years of negotiations and renewals. A former controller's mailbox holds vendor disputes, approval chains and the exceptions behind month-end adjustments, which is why accounts payable exception and approval records so often sit in email rather than in the ERP.

Records like these have become valuable to AI developers. Training agents that carry out multi-step business work needs examples of real work with real outcomes, and that material is thin on the public web. An Epoch AI forecast on the limits of human-generated data estimates that, on current trends, language models will have fully used the public stock of human-written text at some point between 2026 and 2032. The range is wide and the projection uncertain, yet it explains much of the buyer interest in permissioned records that never appeared on the open web.

For work email, ownership usually sits with the company. According to the US Copyright Office's Circular 30 on works made for hire, when an employee creates a work as part of their job, the employer, not the employee, is treated as its author and owner. Messages written by customers, vendors and other outsiders are a different matter, as are personal emails mixed into a work inbox; those are handled in the rights review and in redaction rules agreed before any licensing work begins. This is general information, not legal, tax or financial advice. Confirm with your own counsel, tax adviser or professional body before acting.

Whether preserved records belong on the balance sheet is a separate accounting question, covered in can company data be recorded as an asset on the balance sheet.

A leaver timeline that saves the seat and keeps the record

Use this as a default sequence and adjust it to the retention policy the company has adopted.

If litigation is pending or reasonably expected, counsel decides what must be preserved, and nothing in this table overrides that.

Who should sign off before anything is deleted

• IT administrator or MSP: owns the retention settings and runs the conversion or hold.
• HR: owns the leaver process and knows about disputes or claims.
• Legal or outside counsel: decides on holds and on anything sensitive in the mailbox.
• Department head: knows whether a successor still needs the inbox.
• Owner or CEO: decides whether old records should be kept for options beyond compliance, including a possible license.

A fractional CFO is often the one person who sees the whole list, because the cost review crosses all five functions. The fractional CFO referral playbook covers how that vantage point turns into introductions.

What to say when the cost review reaches the leaver list

Notice what the script leaves out. It never asks anyone to forward, export or summarize email for an outside party, and a referral partner never handles the records.

What to preserve before deleting any account

• Mailboxes of departed employees, kept as inactive or shared mailboxes
• Online archive mailboxes attached to those accounts
• The leaver's OneDrive files, which follow their own retention setting for deleted users
• Teams chats and meeting recordings, which are stored and retained separately from email
• Functional mailboxes such as accounts payable, billing and support addresses
• A leaver log listing name, role, dates, what was kept, where and under which policy
• A note of any legal hold and who requested it

If the company has no written rules yet, the data retention policy template for mid-sized companies gives you a starting structure, and the SaaS spend audit guide shows where else cost cuts can quietly delete history.

Where a data license fits, and where it does not

Preserved email adds depth to a licensing case, but it is one system among many. The companies SourceX looks for reached 50+ full-time employees at peak (contractors excluded), have several years of documented operations in many systems, hold the rights to license the records and have an owner or executive who can sponsor the decision. For a quick first view, the company fit checker runs a preliminary, non-binding screen with no contact details required.

Skip the idea when the inboxes mostly hold clients' confidential material that client contracts reserve, when the business mainly handles consumer personal data, or when the mailboxes were already purged.

Next step

Put leaver mailboxes on retention this month, then think about licensing without time pressure. If a client company looks like a fit, register as a partner and introduce the owner; SourceX works with the company directly on the inventory, rights and terms.