
Backup as a Service
Backup that survives the attack
Most businesses find out their backup doesn't work during a ransomware attack. Mindtime BaaS is immutable, checked on every job and fully managed, and your data never leaves the Netherlands or Germany.
What do you need to back up?
SaaSMicrosoft 365Exchange, SharePoint, OneDrive and Teams
SaaSGoogle WorkspaceGmail, Drive, Calendar and ContactsVirtualisationVMware and Hyper-VAgentless VM backup with instant recovery
VirtualisationProxmoxAn off-site, immutable copy for Proxmox VE
Servers and dataDatabasesSQL Server, MySQL, PostgreSQL, MariaDB, Oracle
Servers and dataNASSynology and QNAP
Servers and dataLinux serversLightweight agent, file-level restore
Public cloudAWSA second copy, outside AWS
Public cloudAzureAzure, Microsoft 365 and Entra ID
Public cloudGoogle CloudA copy Google can't reach
DevicesEndpointsWindows, macOS and Linux laptops
- Not sure?Free assessmentWe map your workloads and write a protection plan, free
In short
What is Backup as a Service?
Backup as a Service (BaaS) is backup you don't have to run yourself. Mindtime copies your data automatically to immutable storage in Dutch and German data centres, checks every backup job, monitors it 24/7 and helps you restore when something goes wrong.
- What we back up
- Microsoft 365, Google Workspace, VMs, servers, databases, NAS, AWS, Azure, Google Cloud and endpoints
- Where it's stored
- Tier III data centres in the Netherlands and Germany, under EU law
- How it's protected
- Object Lock immutability plus an air-gapped copy, following the 3-2-1-1-0 rule
- Who runs it
- Mindtime, with 24/7 monitoring and personal support in Dutch, German and English
The hidden risk
Most backups fail exactly when you need them
Ransomware groups go after backup systems first. A backup that has never been tested isn't a safety net. It's an assumption.
58%
of untested restores fail
If nobody has tried a restore, nobody knows whether it works. Mindtime checks every backup job automatically.
First
Ransomware hunts backups
Modern attacks encrypt or delete backups before they touch production. Only immutable copies survive.
93 days
Microsoft 365 is not a backup
Deleted files sit in the recycle bin for 93 days. After that they are gone, unless you keep your own copy.
NIS2
Recovery is now a legal duty
An estimated 160,000 EU organisations must show tested backup and recovery. Fines can reach €10 million or 2% of turnover.
What's included
Every feature is standard
No add-ons, no hidden tiers, no configuration surprises. These come with every Mindtime BaaS plan.
-
Immutable by default
Object Lock storage plus an air-gapped copy. Ransomware can't encrypt or delete your backups, even with stolen admin credentials.
-
Checked on every job
Every backup is restore-tested automatically. You don't wonder whether recovery will work. You know.
-
Granular restore
Bring back one email, one file or one database record, or an entire VM. Self-service, from one console.
-
Instant VM boot
Critical virtual machines start straight from backup in our isolated recovery environment, and critical workloads are restored on a 4-hour SLA.
-
EU-only data residency
Every byte stays in Tier III data centres in the Netherlands and Germany, under EU law and independent of US hyperscalers.
-
Managed and monitored 24/7
We watch every job around the clock and act on alerts, with unlimited backup jobs and unlimited storage.
The 3-2-1-1-0 rule
The backup rule, applied by default
3-2-1-1-0 is the standard for backups that survive ransomware. Mindtime BaaS is built on it, so you don't have to design it yourself.
- 3
copies of your data
Production plus two backups.
- 2
types of storage
So one failure can't take out every copy.
- 1
copy off-site
In our Dutch and German data centres.
- 1
copy immutable
Object Lock plus an air-gapped copy.
- 0
errors on restore
Every job is checked automatically.
The difference
Why EU businesses switch to managed BaaS
How Mindtime BaaS compares with running backup yourself, or keeping it with a US hyperscaler.
| Capability | Mindtime BaaS | Self-managed | Hyperscalers |
|---|---|---|---|
| Where your data lives | NL and DE only, under EU law | Depends on vendor | US parent company |
| Immutable Object Lock | Default | Add-on | Complex setup |
| Monitoring | 24/7, managed by us | Your team | Your team |
| Restore testing | Every job, automatic | Manual | Manual |
| Support | Personal, in Dutch, German and English | Ticket-based | Ticket-based |
How it works
From assessment to protected within a week
No lengthy procurement. You get a written protection plan before you sign anything.
- 01
Day 1 · Free, no obligation
Assess
We map your workloads, recovery targets and compliance gaps, and write up a protection plan.
- 02
Days 2–5 · Guided
Deploy and protect
Lightweight agents or agentless snapshots send AES-256 encrypted data to our Dutch and German data centres, without disrupting your work.
- 03
Ongoing · Managed
Monitor and recover
Every job is checked automatically, 24/7. When something goes wrong, our recovery team restores critical workloads on a 4-hour SLA.
Compliance by design
Built around EU regulation
Mindtime covers the technical layer of backup and recovery. Governance and incident reporting stay with you, and we give you the evidence to show it.
NIS2 · Article 21(2)(c)
Business continuity, documented
Tested restore procedures, audit logs and incident documentation, generated automatically for your auditor.
NIS2 complianceGDPR
EU law only
Data stored only in the Netherlands and Germany. A Data Processing Agreement comes with every contract.
ISO 27001 · NEN 7510
Independently audited
Security controls, access management and incident response audited every year, including the Dutch standard for health data.
ISO 27001 certificate (PDF) NEN 7510 certificate (PDF)
Results
- 40%
lower total cost of ownership than self-hosted backup
- 100%
audit pass rate
- 0
IT hours spent babysitting backups

For MSPs
Offer BaaS to every client
Grow recurring revenue without adding infrastructure. Mindtime runs the platform and the storage in Dutch and German data centres.
- One multi-tenant console for every client, job and alert
- Write-once, read-many retention that neither malware nor rogue admins can change
- Pay-as-you-grow billing: software, storage and support in one subscription
- REST APIs and hooks for RMM and PSA tools
From the blog
Guides on backup
BackupDoes Microsoft 365 back up my data?Microsoft keeps the service running. What happens to your email, files and Teams data after a deletion or a ransomware attack is up to you.8 min read
BackupHow do you know if your backup actually works?The only proof is a restore. Here's how to test at three levels, which numbers to track, and what evidence auditors expect.9 min read
BackupCloud storage vs cloud backup: what's the difference?OneDrive, Google Drive and Azure Blob storage keep your files available. A cloud backup keeps them recoverable. You need to know which one you're relying on.7 min read
BackupWhat is Proxmox Backup Server, and is it enough on its own?PBS is a capable, free backup server for Proxmox VE. Here's what it protects, what it leaves to you, and how to add the copy that survives a bad day.8 min read
BackupDoes continuous backup protect you against ransomware?Backing up more often shrinks the gap between your last copy and the attack. It doesn't help if the copies themselves can be encrypted or deleted.8 min read
BackupHow should MSPs offer immutable backup to their clients?Your clients don't buy storage. They buy the certainty that a restore will work after an attack, including an attack that starts in your own tools.8 min read
FAQ
Common questions
What is Backup as a Service (BaaS)?
Backup as a Service is backup you don't have to run yourself. Your data is copied automatically to secure off-site data centres, monitored 24/7 and checked on every job, and specialists help you restore it. Mindtime stores everything only in the Netherlands and Germany.
Doesn't Microsoft 365 already back up my data?
No. Microsoft 365 is a productivity platform, not a backup. Deleted files stay in the recycle bin for 93 days; after that they are gone. Mindtime keeps its own immutable copy outside Microsoft, in Dutch and German data centres. Read about Microsoft 365 backup.
How are backups protected against ransomware?
Backups are stored on immutable Object Lock storage that nobody can encrypt or delete, with an additional air-gapped copy in an isolated environment. Admin actions require MFA, backups are scanned for malware, and recovery runs in a separate, clean network.
Where is my data stored, and who can access it?
Only in Tier III data centres in the Netherlands and Germany, under EU law and independent of US hyperscalers. Access is limited to you and authorised Mindtime engineers, with role-based access and MFA.
What is the 3-2-1-1-0 backup rule?
Keep 3 copies of your data, on 2 different types of storage, with 1 copy off-site and 1 copy immutable or offline, and 0 errors when the backup is verified. Mindtime BaaS applies the rule by default.
Does Backup as a Service help with NIS2?
NIS2 Article 21(2)(c) requires business continuity measures such as backup management and disaster recovery. Mindtime BaaS covers that technical layer and produces the restore tests and audit logs to show it. Governance and incident reporting remain your responsibility. See NIS2 compliance.
Can MSPs offer Mindtime BaaS to their clients?
Yes. MSPs manage every client from one multi-tenant console, with pay-as-you-grow billing and REST APIs and hooks for RMM and PSA tools. Become a partner.
Keep reading
Where to go next
- 01Disaster RecoveryWhen restoring files isn't enough: failover and runbooks for whole systems.
- 02Microsoft 365 backupMail, OneDrive, SharePoint and Teams, kept far beyond the 93-day recycle bin.
- 03NIS2 ComplianceThe backup and recovery controls NIS2 asks for, documented so you can show your auditor.