Skip to content

Backup as a Service

Backup that survives the attack

Most businesses find out their backup doesn't work during a ransomware attack. Mindtime BaaS is immutable, checked on every job and fully managed, and your data never leaves the Netherlands or Germany.

Data centres
NL · DE
Storage
Immutable
Rule
3-2-1-1-0
Audited
ISO 27001 · NEN 7510

In short

What is Backup as a Service?

Backup as a Service (BaaS) is backup you don't have to run yourself. Mindtime copies your data automatically to immutable storage in Dutch and German data centres, checks every backup job, monitors it 24/7 and helps you restore when something goes wrong.

What we back up
Microsoft 365, Google Workspace, VMs, servers, databases, NAS, AWS, Azure, Google Cloud and endpoints
Where it's stored
Tier III data centres in the Netherlands and Germany, under EU law
How it's protected
Object Lock immutability plus an air-gapped copy, following the 3-2-1-1-0 rule
Who runs it
Mindtime, with 24/7 monitoring and personal support in Dutch, German and English

The hidden risk

Most backups fail exactly when you need them

Ransomware groups go after backup systems first. A backup that has never been tested isn't a safety net. It's an assumption.

  1. 58%

    of untested restores fail

    If nobody has tried a restore, nobody knows whether it works. Mindtime checks every backup job automatically.

  2. First

    Ransomware hunts backups

    Modern attacks encrypt or delete backups before they touch production. Only immutable copies survive.

  3. 93 days

    Microsoft 365 is not a backup

    Deleted files sit in the recycle bin for 93 days. After that they are gone, unless you keep your own copy.

  4. NIS2

    Recovery is now a legal duty

    An estimated 160,000 EU organisations must show tested backup and recovery. Fines can reach €10 million or 2% of turnover.

What's included

Every feature is standard

No add-ons, no hidden tiers, no configuration surprises. These come with every Mindtime BaaS plan.

  • Immutable by default

    Object Lock storage plus an air-gapped copy. Ransomware can't encrypt or delete your backups, even with stolen admin credentials.

  • Checked on every job

    Every backup is restore-tested automatically. You don't wonder whether recovery will work. You know.

  • Granular restore

    Bring back one email, one file or one database record, or an entire VM. Self-service, from one console.

  • Instant VM boot

    Critical virtual machines start straight from backup in our isolated recovery environment, and critical workloads are restored on a 4-hour SLA.

  • EU-only data residency

    Every byte stays in Tier III data centres in the Netherlands and Germany, under EU law and independent of US hyperscalers.

  • Managed and monitored 24/7

    We watch every job around the clock and act on alerts, with unlimited backup jobs and unlimited storage.

The 3-2-1-1-0 rule

The backup rule, applied by default

3-2-1-1-0 is the standard for backups that survive ransomware. Mindtime BaaS is built on it, so you don't have to design it yourself.

  1. 3

    copies of your data

    Production plus two backups.

  2. 2

    types of storage

    So one failure can't take out every copy.

  3. 1

    copy off-site

    In our Dutch and German data centres.

  4. 1

    copy immutable

    Object Lock plus an air-gapped copy.

  5. 0

    errors on restore

    Every job is checked automatically.

The difference

Why EU businesses switch to managed BaaS

How Mindtime BaaS compares with running backup yourself, or keeping it with a US hyperscaler.

Mindtime BaaS compared with self-managed backup and hyperscaler backup
CapabilityMindtime BaaSSelf-managedHyperscalers
Where your data livesNL and DE only, under EU lawDepends on vendorUS parent company
Immutable Object LockDefaultAdd-onComplex setup
Monitoring24/7, managed by usYour teamYour team
Restore testingEvery job, automaticManualManual
SupportPersonal, in Dutch, German and EnglishTicket-basedTicket-based

How it works

From assessment to protected within a week

No lengthy procurement. You get a written protection plan before you sign anything.

  1. 01

    Day 1 · Free, no obligation

    Assess

    We map your workloads, recovery targets and compliance gaps, and write up a protection plan.

  2. 02

    Days 2–5 · Guided

    Deploy and protect

    Lightweight agents or agentless snapshots send AES-256 encrypted data to our Dutch and German data centres, without disrupting your work.

  3. 03

    Ongoing · Managed

    Monitor and recover

    Every job is checked automatically, 24/7. When something goes wrong, our recovery team restores critical workloads on a 4-hour SLA.

Compliance by design

Built around EU regulation

Mindtime covers the technical layer of backup and recovery. Governance and incident reporting stay with you, and we give you the evidence to show it.

  • NIS2 · Article 21(2)(c)

    Business continuity, documented

    Tested restore procedures, audit logs and incident documentation, generated automatically for your auditor.

    NIS2 compliance
  • GDPR

    EU law only

    Data stored only in the Netherlands and Germany. A Data Processing Agreement comes with every contract.

  • ISO 27001 · NEN 7510

    Independently audited

    Security controls, access management and incident response audited every year, including the Dutch standard for health data.

    ISO 27001 certificate (PDF) NEN 7510 certificate (PDF)

Results

  • 40%

    lower total cost of ownership than self-hosted backup

  • 100%

    audit pass rate

  • 0

    IT hours spent babysitting backups

An MSP engineer managing client environments from one console

For MSPs

Offer BaaS to every client

Grow recurring revenue without adding infrastructure. Mindtime runs the platform and the storage in Dutch and German data centres.

  • One multi-tenant console for every client, job and alert
  • Write-once, read-many retention that neither malware nor rogue admins can change
  • Pay-as-you-grow billing: software, storage and support in one subscription
  • REST APIs and hooks for RMM and PSA tools
Become a partner

FAQ

Common questions

What is Backup as a Service (BaaS)?

Backup as a Service is backup you don't have to run yourself. Your data is copied automatically to secure off-site data centres, monitored 24/7 and checked on every job, and specialists help you restore it. Mindtime stores everything only in the Netherlands and Germany.

Doesn't Microsoft 365 already back up my data?

No. Microsoft 365 is a productivity platform, not a backup. Deleted files stay in the recycle bin for 93 days; after that they are gone. Mindtime keeps its own immutable copy outside Microsoft, in Dutch and German data centres. Read about Microsoft 365 backup.

How are backups protected against ransomware?

Backups are stored on immutable Object Lock storage that nobody can encrypt or delete, with an additional air-gapped copy in an isolated environment. Admin actions require MFA, backups are scanned for malware, and recovery runs in a separate, clean network.

Where is my data stored, and who can access it?

Only in Tier III data centres in the Netherlands and Germany, under EU law and independent of US hyperscalers. Access is limited to you and authorised Mindtime engineers, with role-based access and MFA.

What is the 3-2-1-1-0 backup rule?

Keep 3 copies of your data, on 2 different types of storage, with 1 copy off-site and 1 copy immutable or offline, and 0 errors when the backup is verified. Mindtime BaaS applies the rule by default.

Does Backup as a Service help with NIS2?

NIS2 Article 21(2)(c) requires business continuity measures such as backup management and disaster recovery. Mindtime BaaS covers that technical layer and produces the restore tests and audit logs to show it. Governance and incident reporting remain your responsibility. See NIS2 compliance.

Can MSPs offer Mindtime BaaS to their clients?

Yes. MSPs manage every client from one multi-tenant console, with pay-as-you-grow billing and REST APIs and hooks for RMM and PSA tools. Become a partner.