SaaS uptime isn’t the same as recovery. Microsoft 365, Google Workspace, Salesforce, and Dynamics 365 all keep services online — but none guarantee data restoration. Under CPS 230 and the Essential Eight, organisations must prove independence, immutability, sovereignty, and testing. This guide shows why recoverability matters, how Keepit delivers it, and what to demand from your SaaS backup vendor.