Migrations to Microsoft 365
Waves, not lost weekends.
Move tenants, mailboxes and workloads without losing weekends: designed in advance, executed in batched waves behind a pilot that is allowed to fail, with coexistence keeping mail and files flowing the whole way.
- T-7Announcement
- T-1Reminder and go or no-go
- CutoverFinal sync and mail routing
- Day 1Welcome mail and spot checks
- HypercareThirty days and a validation report
- RollbackThe path back
- DecomDecommission the source
You leave with
A signed wave plan with rollback criteria
Who moves when, sized from pilot-measured throughput, with blackout dates honoured and a written DNS schedule. Changes to it are made in writing.
A pilot that is allowed to fail
5-10 real users through the full path, measured against seven criteria. Waves start from a signed pilot report.
Validation report against success criteria
Wave-by-wave evidence: sync logs, mail-flow matrices, fidelity samples, ticket trends. The report that gates source decommissioning.
30-day hypercare with me
A daily triage in week one. Recurring themes become fix tasks, and the trend line is part of the closure evidence.
The Exit Kit
Evidence, access removal and the list of known debts.
What is in the delivery kit
The kit is shown as it ships. I send any runbook you ask for before you buy.
00-discovery
The questionnaire that sizes the estate and finds the day-1 requirements before anything moves.
- DISCOVERY-questionnaire.md
01-architecture-decision-records
Strategy, tooling and coexistence decided in writing, with worked examples.
- ADR-0001-migration-strategy-and-tooling.md
- ADR-0002-coexistence-and-identity.md
- ADR-TEMPLATE.md
02-wave-planner
The signed source of truth for who moves when, plus the per-wave checklist where every box gets a name and a time.
- WAVE-PLAN-template.md
- CUTOVER-CHECKLIST-template.md
03-runbooks
Ten operating procedures, from the pilot gate to source decommissioning.
- RUNBOOK-01-pilot-wave.md
- RUNBOOK-02-mailbox-batch-move.md
- RUNBOOK-03-onedrive-sharepoint-move.md
- RUNBOOK-04-teams-migration.md
- RUNBOOK-05-mail-coexistence-and-routing.md
- RUNBOOK-06-identity-and-domain-cutover.md
- RUNBOOK-07-fileshare-to-sharepoint.md
- RUNBOOK-08-wave-rollback.md
- RUNBOOK-09-hypercare-and-validation.md
- RUNBOOK-10-decommission-source.md
04-exit-kit
The Exit Kit: evidence, access removal and the list of known debts.
- EXIT-KIT-cloud-and-m365-migrations.md
05-compliance
11 controls mapped to GDPR, DORA and NIS2: chain of custody, legal holds, destruction evidence. A working mapping, not legal advice or a compliance assessment; your compliance owner confirms which rules apply to you.
- control-mapping-matrix.md
06-comms-pack
Three user mails (T-7, T-1, day 1) written in plain language. Comms are a control here, not a courtesy.
- T-7-announcement.md
- T-1-reminder.md
- day-1-welcome.md
07-scope-sheet.md
The working file for the Assessment and Delivery scope, filled in during discovery. It enters the Statement of Work by written change. The file lists a third tier that is not offered here.
How it runs
Illustrative plan with invented numbers. Real waves are sized from your pilot.
Pilot
I would measure migration throughput in the pilot and size every wave below from that measurement. Any shared mailbox permission chain that surfaces here gets mapped before Wave 1.
Wave 1
Finance would move outside month-end close, with the window agreed with your finance lead in writing. Delegate access chains get re-linked before go-live.
Wave 2
Mailboxes would be pre-synced overnight and the cutover held in an agreed evening window. A shared calendar that needs a manual re-share goes into the log and into the Wave 3 checklist.
Wave 3
White-glove wave: I would handle each executive myself and re-register their phones for MFA on the same call. Legacy PST archives that turn up here are added to the Statement of Work in writing during the wave, instead of after the engagement closes.
Decommission
Nothing gets switched off until the validation report is signed and you confirm in writing that no hold needs the source: mail-flow matrix green, restore test passed, licence teardown scheduled. The source retires with evidence filed.
The bridge, built once, tested before the pilot
Mail routing
Per-user target addressing over connectors. DMARC stays aligned; no forwarding chains.
Free / busy
Cross-org calendar visibility while teams live in two tenants.
File shortcuts
Moved content reachable from both sides until the last wave lands.
DNS changes ride a written schedule: MX, SPF, DKIM, Autodiscover.
Engagement tiers
The Statement of Work is signed before any access or discovery and fixes the tier. The tier scope sheet is the working file filled in during discovery; it enters the Statement of Work by written change, so what is included is written down. Wave plans and pilot and validation reports are signed as step approvals; they change price or scope only through a written change to the Statement of Work.
Assessment
Up to two weeks. You get the plan and the price of the move.
Delivery
Pilot, waves, cutover, hypercare, decommission. The whole arc.
The move starts from another Microsoft 365 tenant or from file servers up to the agreed volume. Google Workspace as a source is quoted separately, on request.
What is not included
The migration
I list exclusions so delivery stays fast. If something you need is here, I will tell you which service or partner picks it up. Google Workspace to Microsoft 365 is quoted separately.
- On-premises Exchange or SharePoint Server migration (a separate project with its own discovery)
- Network file share migration over 50 TB (custom scope)
- Custom Power Platform or Dynamics 365 migration
- Migration of ISV-licensed workloads without the vendor's cooperation
Check it before you scope it
A free planning pack of seven templates: the wave plan, the cutover gates, the rollback runbook, hypercare and the day-one message to users. Tooling, coexistence, data protection and rollback criteria require workload-specific validation.
The free mail deliverability test reads the public DNS records of a domain: SPF, DKIM, DMARC and MTA-STS. Before the move it shows the records the domain publishes today, and you can run it again after cutover.
Pricing
Fixed in writing before any work starts, from a 30-minute call. The price depends on the rows below.
- Billing basis
- By the day, or a fixed scope, set in a Statement of Work.
- What moves the price
- The number of mailboxes, the volume of data, the workloads in scope and the number of waves.
- Tool licences
- Quoted at the Assessment. You buy them in your organisation's name, on the tool vendor's terms and outside the price of my work, so the licences stay with you.
- Currency
- EUR, excluding VAT.
- Contract days
- From €600 a day. Excluding VAT. Minimum two days. Invoiced monthly in arrears. Remote, Central European Time.
- VAT
- Reverse charge for EU businesses outside Malta whose VAT number validates in VIES. Malta VAT otherwise.
- Data processing
When I work in your systems, I process personal data for you as your processor under the Terms of Service (Article 28 GDPR), and I do not put that data into AI tools.
- Invoiced by
- Michal Jatczak, sole trader registered in Malta.
- Service level
- No SLA and no on-call duty. Dates are written into the Statement of Work.
The detail, if you want it
What each tier includes
Assessment
- Discovery questionnaire + estate volumetrics
- Dependency mapping: apps bound to identity and mail
- ADR set: strategy, tooling, coexistence
- Wave plan v1 with rollback criteria and DNS schedule
- Tooling licence quote, for licences you buy in your organisation's name
A migration you can price, schedule and defend before committing to it.
Delivery
- Coexistence built and tested before the pilot books a window
- Pilot wave with a signed report gating production
- Batched waves: mail, OneDrive/SharePoint, Teams, identity, and file servers up to the agreed volume
- User comms per wave (T-7, T-1, day 1) from the comms pack
- 30-day hypercare with me, validation report, source decommissioning, Exit Kit
Everyone on the target tenant, evidence filed, source retired without folklore.
How long does a tenant-to-tenant migration take?
Smaller estates: 2 to 6 weeks from kick-off to the last wave. Mid-sized estates: 6 to 12 weeks. Then come 30 days of hypercare and the validation report; the source is decommissioned only once it is signed. Which band an estate is in follows the number of mailboxes and the terabytes of data, measured at discovery, not the size of the company. Larger estates are sized at the Assessment.
Will you take my weekend? What goes down?
The wave model exists so the answer is "almost nothing". Mail is designed to keep flowing through coexistence routing during the whole engagement; each wave cuts over in an evening window, and users register MFA on their target-tenant account next morning, following a guide with screenshots they receive the day before. This describes the method, not an availability commitment: outages at Microsoft or another provider are outside my control, and a wave that fails goes back to its rollback point. Big-bang weekends are what this service replaces.
What happens to Teams chats and channels?
It depends on the tool. Microsoft's native user-data migration moves chats and meetings with documented gaps and leaves shared data (teams, channels and SharePoint sites) in the source; sites need Microsoft's separate cross-tenant SharePoint migration, which on 29 October 2026 Microsoft Learn lists as available to Enterprise Agreement customers only. The gap list is written and signed at the pilot.
Who pays for the migration tooling?
Tool licences (BitTitan, Quest or ShareGate, chosen by measured volume) are quoted at the Assessment. You buy them in your organisation's name on the tool vendor's terms, the vendor invoices you, and the quote shows them apart from the price of my work, so the licences stay with you after the engagement. Because the contract is yours, the vendor processes the mailbox data as your processor, not as my sub-processor; where the tool keeps data during the move is checked at the Assessment and written in the Statement of Work. The native route needs Microsoft's per-user Cross Tenant User Data Migration licence, a one-time fee for each migrated user, bought like your other Microsoft licences.
We have legal holds and eDiscovery cases in flight. Is that a blocker?
Microsoft's native move does not migrate mailboxes on any hold. Whether to lift a hold, export the data or use another tool is your decision with your counsel; we record it in the Statement of Work at the Assessment. I do not lift a hold without your written instruction, and the source is not deleted until you confirm in writing that no hold needs it.
Who does the work?
I do, the same engineer you meet on the discovery call. No subcontractors, no account managers and no junior rotation. You get a shared channel in your Teams and a direct line to me while I run your waves.
Microsoft sources for the native tools
Read on Microsoft Learn on 29 October 2026. Microsoft changes these tools, so the page states what the documents say on that day.
Agree the rollback point before the first wave moves.
Every wave gets entry criteria, a named owner and a way back. The workshop settles those for your first wave and the hypercare window behind it.
Every consulting engagement ends with an Exit Kit.