Skip to content

Migrations to Microsoft 365

Waves, not lost weekends.

Move tenants, mailboxes and workloads without losing weekends: designed in advance, executed in batched waves behind a pilot that is allowed to fail, with coexistence keeping mail and files flowing the whole way.

One migration wave, from announcement to decommission
  1. T-7AnnouncementSent seven days before the wave. Users have nothing to do yet. T-7-announcement.md
  2. T-1Reminder and go or no-goThe rollback criteria are read aloud and the decision is recorded with names and a time. CUTOVER-CHECKLIST-template.md
  3. CutoverFinal sync and mail routingEvery box on the checklist gets a name and a time. CUTOVER-CHECKLIST-template.md
  4. Day 1Welcome mail and spot checksWhere things live now, and send and receive checks across the wave. day-1-welcome.md
  5. HypercareThirty days and a validation reportA named engineer, a hypercare log, and the success criteria checked row by row at day 30. RUNBOOK-09-hypercare-and-validation.md
  6. RollbackThe path backOne named person calls it. Mail routing is flipped back from the undo file. RUNBOOK-08-wave-rollback.md
  7. DecomDecommission the sourceOnly behind the signed validation report, and it leaves evidence. RUNBOOK-10-decommission-source.md

You leave with

  • A signed wave plan with rollback criteria

    Who moves when, sized from pilot-measured throughput, with blackout dates honoured and a written DNS schedule. Changes to it are made in writing.

  • A pilot that is allowed to fail

    5-10 real users through the full path, measured against seven criteria. Waves start from a signed pilot report.

  • Validation report against success criteria

    Wave-by-wave evidence: sync logs, mail-flow matrices, fidelity samples, ticket trends. The report that gates source decommissioning.

  • 30-day hypercare with me

    A daily triage in week one. Recurring themes become fix tasks, and the trend line is part of the closure evidence.

  • The Exit Kit

    Evidence, access removal and the list of known debts.

What is in the delivery kit

The kit is shown as it ships. I send any runbook you ask for before you buy.

  • 00-discovery

    The questionnaire that sizes the estate and finds the day-1 requirements before anything moves.

    • DISCOVERY-questionnaire.md
  • 01-architecture-decision-records

    Strategy, tooling and coexistence decided in writing, with worked examples.

    • ADR-0001-migration-strategy-and-tooling.md
    • ADR-0002-coexistence-and-identity.md
    • ADR-TEMPLATE.md
  • 02-wave-planner

    The signed source of truth for who moves when, plus the per-wave checklist where every box gets a name and a time.

    • WAVE-PLAN-template.md
    • CUTOVER-CHECKLIST-template.md
  • 03-runbooks

    Ten operating procedures, from the pilot gate to source decommissioning.

    • RUNBOOK-01-pilot-wave.md
    • RUNBOOK-02-mailbox-batch-move.md
    • RUNBOOK-03-onedrive-sharepoint-move.md
    • RUNBOOK-04-teams-migration.md
    • RUNBOOK-05-mail-coexistence-and-routing.md
    • RUNBOOK-06-identity-and-domain-cutover.md
    • RUNBOOK-07-fileshare-to-sharepoint.md
    • RUNBOOK-08-wave-rollback.md
    • RUNBOOK-09-hypercare-and-validation.md
    • RUNBOOK-10-decommission-source.md
  • 04-exit-kit

    The Exit Kit: evidence, access removal and the list of known debts.

    • EXIT-KIT-cloud-and-m365-migrations.md
  • 05-compliance

    11 controls mapped to GDPR, DORA and NIS2: chain of custody, legal holds, destruction evidence. A working mapping, not legal advice or a compliance assessment; your compliance owner confirms which rules apply to you.

    • control-mapping-matrix.md
  • 06-comms-pack

    Three user mails (T-7, T-1, day 1) written in plain language. Comms are a control here, not a courtesy.

    • T-7-announcement.md
    • T-1-reminder.md
    • day-1-welcome.md
  • 07-scope-sheet.md

    The working file for the Assessment and Delivery scope, filled in during discovery. It enters the Statement of Work by written change. The file lists a third tier that is not offered here.

How it runs

Illustrative plan with invented numbers. Real waves are sized from your pilot.

  1. Pilot

    5-10 real users, full path, measured

    I would measure migration throughput in the pilot and size every wave below from that measurement. Any shared mailbox permission chain that surfaces here gets mapped before Wave 1.

  2. Wave 1

    Finance + Operations

    Finance would move outside month-end close, with the window agreed with your finance lead in writing. Delegate access chains get re-linked before go-live.

  3. Wave 2

    Sales + Marketing

    Mailboxes would be pre-synced overnight and the cutover held in an agreed evening window. A shared calendar that needs a manual re-share goes into the log and into the Wave 3 checklist.

  4. Wave 3

    Engineering + VIP white-glove

    White-glove wave: I would handle each executive myself and re-register their phones for MFA on the same call. Legacy PST archives that turn up here are added to the Statement of Work in writing during the wave, instead of after the engagement closes.

  5. Decommission

    Source teardown with evidence

    Nothing gets switched off until the validation report is signed and you confirm in writing that no hold needs the source: mail-flow matrix green, restore test passed, licence teardown scheduled. The source retires with evidence filed.

Coexistence runs under every wave to keep mail flowing and files reachable, and each wave keeps its rollback point until the source is decommissioned. Microsoft's native move deletes the source mailbox once it completes, so where a wave needs a way back I use a tool that copies and leaves the source intact.

The bridge, built once, tested before the pilot

  • Mail routing

    Per-user target addressing over connectors. DMARC stays aligned; no forwarding chains.

  • Free / busy

    Cross-org calendar visibility while teams live in two tenants.

  • File shortcuts

    Moved content reachable from both sides until the last wave lands.

DNS changes ride a written schedule: MX, SPF, DKIM, Autodiscover.

Engagement tiers

The Statement of Work is signed before any access or discovery and fixes the tier. The tier scope sheet is the working file filled in during discovery; it enters the Statement of Work by written change, so what is included is written down. Wave plans and pilot and validation reports are signed as step approvals; they change price or scope only through a written change to the Statement of Work.

  • Assessment

    Up to two weeks. You get the plan and the price of the move.

    Fixed scope · up to two weeks

  • Delivery

    Pilot, waves, cutover, hypercare, decommission. The whole arc.

    Fixed scope · 2-12 weeks to the last wave, then 30 days of hypercare

The move starts from another Microsoft 365 tenant or from file servers up to the agreed volume. Google Workspace as a source is quoted separately, on request.

What is not included

  • The migration

    I list exclusions so delivery stays fast. If something you need is here, I will tell you which service or partner picks it up. Google Workspace to Microsoft 365 is quoted separately.

    • On-premises Exchange or SharePoint Server migration (a separate project with its own discovery)
    • Network file share migration over 50 TB (custom scope)
    • Custom Power Platform or Dynamics 365 migration
    • Migration of ISV-licensed workloads without the vendor's cooperation

Check it before you scope it

A free planning pack of seven templates: the wave plan, the cutover gates, the rollback runbook, hypercare and the day-one message to users. Tooling, coexistence, data protection and rollback criteria require workload-specific validation.

Read the cutover checklist first

The free mail deliverability test reads the public DNS records of a domain: SPF, DKIM, DMARC and MTA-STS. Before the move it shows the records the domain publishes today, and you can run it again after cutover.

Test your domain

Pricing

Fixed in writing before any work starts, from a 30-minute call. The price depends on the rows below.

Billing basis
By the day, or a fixed scope, set in a Statement of Work.
What moves the price
The number of mailboxes, the volume of data, the workloads in scope and the number of waves.
Tool licences
Quoted at the Assessment. You buy them in your organisation's name, on the tool vendor's terms and outside the price of my work, so the licences stay with you.
Currency
EUR, excluding VAT.
Contract days
From €600 a day. Excluding VAT. Minimum two days. Invoiced monthly in arrears. Remote, Central European Time.
VAT
Reverse charge for EU businesses outside Malta whose VAT number validates in VIES. Malta VAT otherwise.
Data processing

When I work in your systems, I process personal data for you as your processor under the Terms of Service (Article 28 GDPR), and I do not put that data into AI tools.

Terms of Service, section 14, Processing personal data for you

Subprocessor Register

Invoiced by
Michal Jatczak, sole trader registered in Malta.
Service level
No SLA and no on-call duty. Dates are written into the Statement of Work.

Book a 30-minute call

The detail, if you want it

What each tier includes
  • Assessment

    • Discovery questionnaire + estate volumetrics
    • Dependency mapping: apps bound to identity and mail
    • ADR set: strategy, tooling, coexistence
    • Wave plan v1 with rollback criteria and DNS schedule
    • Tooling licence quote, for licences you buy in your organisation's name

    A migration you can price, schedule and defend before committing to it.

  • Delivery

    • Coexistence built and tested before the pilot books a window
    • Pilot wave with a signed report gating production
    • Batched waves: mail, OneDrive/SharePoint, Teams, identity, and file servers up to the agreed volume
    • User comms per wave (T-7, T-1, day 1) from the comms pack
    • 30-day hypercare with me, validation report, source decommissioning, Exit Kit

    Everyone on the target tenant, evidence filed, source retired without folklore.

How long does a tenant-to-tenant migration take?

Smaller estates: 2 to 6 weeks from kick-off to the last wave. Mid-sized estates: 6 to 12 weeks. Then come 30 days of hypercare and the validation report; the source is decommissioned only once it is signed. Which band an estate is in follows the number of mailboxes and the terabytes of data, measured at discovery, not the size of the company. Larger estates are sized at the Assessment.

Will you take my weekend? What goes down?

The wave model exists so the answer is "almost nothing". Mail is designed to keep flowing through coexistence routing during the whole engagement; each wave cuts over in an evening window, and users register MFA on their target-tenant account next morning, following a guide with screenshots they receive the day before. This describes the method, not an availability commitment: outages at Microsoft or another provider are outside my control, and a wave that fails goes back to its rollback point. Big-bang weekends are what this service replaces.

What happens to Teams chats and channels?

It depends on the tool. Microsoft's native user-data migration moves chats and meetings with documented gaps and leaves shared data (teams, channels and SharePoint sites) in the source; sites need Microsoft's separate cross-tenant SharePoint migration, which on 29 October 2026 Microsoft Learn lists as available to Enterprise Agreement customers only. The gap list is written and signed at the pilot.

Who pays for the migration tooling?

Tool licences (BitTitan, Quest or ShareGate, chosen by measured volume) are quoted at the Assessment. You buy them in your organisation's name on the tool vendor's terms, the vendor invoices you, and the quote shows them apart from the price of my work, so the licences stay with you after the engagement. Because the contract is yours, the vendor processes the mailbox data as your processor, not as my sub-processor; where the tool keeps data during the move is checked at the Assessment and written in the Statement of Work. The native route needs Microsoft's per-user Cross Tenant User Data Migration licence, a one-time fee for each migrated user, bought like your other Microsoft licences.

We have legal holds and eDiscovery cases in flight. Is that a blocker?

Microsoft's native move does not migrate mailboxes on any hold. Whether to lift a hold, export the data or use another tool is your decision with your counsel; we record it in the Statement of Work at the Assessment. I do not lift a hold without your written instruction, and the source is not deleted until you confirm in writing that no hold needs it.

Who does the work?

I do, the same engineer you meet on the discovery call. No subcontractors, no account managers and no junior rotation. You get a shared channel in your Teams and a direct line to me while I run your waves.

Microsoft sources for the native tools

Read on Microsoft Learn on 29 October 2026. Microsoft changes these tools, so the page states what the documents say on that day.

Agree the rollback point before the first wave moves.

Every wave gets entry criteria, a named owner and a way back. The workshop settles those for your first wave and the hypercare window behind it.

Every consulting engagement ends with an Exit Kit.

Clause effective 28 October 2026