Healthcare
Backup for care homes, home care and day care
Mindtime makes immutable copies of the mail, shared drives, rosters and laptops your care teams work with, whether you use Microsoft 365 or Google Workspace. Backups stay in Mindtime's own data centres in the Netherlands and Germany.
In Dutch, German or English.
- NL · DEStored only in our own Tier III data centres in the Netherlands and Germany
- ImmutableObject Lock storage plus an air-gapped copy; every backup job is checked
- ISO 27001 · NEN 7510Audited security, with a data processing agreement in every contract
- NL · DE · ENSupport from people, no offshore call centres or chatbots
In short
Care homes and home-care organisations need a separate backup because care plans, rosters and family correspondence sit in cloud tools that do not keep an independent copy. Mindtime backs up Microsoft 365 or Google Workspace, laptops and servers to its own NEN 7510-audited data centres in the Netherlands and Germany, with immutable copies and checked jobs.
What's at stake
The data care homes and home care can't afford to lose
Care plans and evaluations
Each resident's care plan records agreements on nursing, support and daily activities, and is reviewed with the client at least twice a year. Supporting documents, evaluation notes and family agreements are often kept outside the client file system.
Rosters and visit routes
Home-care teams depend on visit lists, routes and shift rosters that change daily. A lost roster means clients waiting at home for care that nobody was scheduled to deliver.
Family and GP correspondence
Emails with relatives, GPs and elderly care physicians hold decisions that are not always copied into the client file. When a mailbox is deleted or hijacked, that history goes with it.
Rules and obligations
What the rules ask of care homes and home care
Summarised from the sources listed at the bottom of this page. This is general information, not legal advice.
A care plan within six weeks under the Wlz
Under the Wet langdurige zorg (Wlz) a care provider draws up a care plan no later than six weeks after care starts and discusses it with the client at least twice a year. That record has to stay available for every review. [1]
Information security under NEN 7510
The Wabvpz obliges care providers to set up information security according to NEN 7510, under supervision of the IGJ. This applies to home-care and nursing organisations just as it does to hospitals. [2]
Cyberbeveiligingswet for larger care organisations
Since 15 August 2026 the Cyberbeveiligingswet applies to healthcare providers with 50 FTE or more, or above the EU turnover and balance-sheet ceiling for small enterprises. Many regional care organisations pass that line; small home-care teams usually do not. [3]
Ransomware and the duty to report
The AP treats ransomware that encrypted files with personal data as a data breach. Where data is inaccessible and no backup is available, you may also need to inform the people affected. [4]
When it goes wrong
A deleted shared drive at a home-care team
Illustrative example: a team leader at a home-care organisation leaves, and her Google account is removed along with a shared drive she owned. Weeks later the team discovers that the folder with work instructions and family agreements has gone, and the Drive trash has already been emptied. Because Mindtime backed up the shared drive to its Dutch data centre, the folder is restored from a version before the account was removed. The team checks the restored files and carries on with its rounds.
How Mindtime protects it
Backup for care homes and home care, workload by workload
- Google Workspace backupTeams that run on Gmail and shared drives need a copy that survives deleted accounts and an emptied trash.
- Microsoft 365 backupOrganisations on Microsoft 365 keep care-related mail and SharePoint libraries outside the client file system.
- Laptop and endpoint backupDistrict nurses and team leaders work on laptops and tablets away from any office.
- NAS backupLocations that keep scanned documents or photos on a Synology or QNAP box need that copy off-site.
- NIS2 ComplianceCare organisations of 50 FTE or more now have Cyberbeveiligingswet duties, including recovering from incidents.
The software you use, and what we protect around it
| Nedap Ons (electronic client file) | Widely used in elderly, home and disability care and run by Nedap. Ask the supplier about export and retention; Mindtime protects the mail, shared drives and laptops around it. |
|---|---|
| Microsoft 365 or Google Workspace | Team mailboxes, shared drives and planning sheets. Mindtime backs up either suite, so a deleted mailbox or drive can be restored. |
| Rosters and visit lists in spreadsheets | Excel or Google Sheets files kept in OneDrive, SharePoint or Drive are included in the Microsoft 365 or Google Workspace backup. |
| Laptops and tablets of district nurses | Devices used on the road can be lost or damaged. Mindtime backs up Windows, macOS and mobile devices. |
Google Workspace
Google Workspace backup for care organisations
Some care organisations, often smaller home-care teams and day-care locations, work entirely in Gmail, Google Drive and shared drives. Google keeps the service running, but it does not keep an independent copy that you control.
- Shared drives typically hold work instructions, protocols and team agreements, while Gmail holds referrals and contact with relatives. Sheets often carry rosters and visit lists.
- Google's Drive trash is not a safety net: according to Google, files moved to the trash are deleted forever after 30 days.
- Google Vault is a retention and eDiscovery tool, not a backup. Google states that Vault isn't a data archive and that data not on hold follows standard deletion once retention rules expire.
- Mindtime backs up Gmail, Drive and shared drives to its own data centres in the Netherlands and Germany. You can try it free for 7 days.
Before you switch
What care homes and home care ask us first
Google and Microsoft already keep our data safe, don't they?
They keep their platforms running, but deleted mail and files follow their retention rules and then disappear. Mindtime keeps an independent, immutable copy in its own data centres in the Netherlands and Germany. You can test this on your own tenant with the 7-day free trial.
We are a small home-care team. Is this not overkill?
A small team has the most to lose from one deleted account, because nobody else holds a copy. Mindtime monitors backups 24/7 and checks every job, so you are not the one watching them. A free 15-minute demo shows what it looks like for your situation.
Who signs the processing agreement for client data?
Every Mindtime contract comes with a data processing agreement. It records that backups stay in Mindtime's own Tier III data centres in the Netherlands and Germany, which are audited against NEN 7510 and ISO 27001.
FAQ
Questions about backup for care homes and home care
Do we still need a backup if our client file runs in the cloud?
Yes, for everything around it. The client file supplier is responsible for its own platform; your mailboxes, shared drives, rosters and laptops are yours to protect. Ask the supplier how you can export client data and how long they keep it, and use Mindtime for the rest of your environment.
What should a care organisation back up first?
Start with what is not in the client file system: team mailboxes, shared drives with protocols and work instructions, and the rosters your planners keep in spreadsheets. Next come the laptops and tablets of staff on the road, and any server or NAS at a location. Mindtime covers all of these from one service.
Does the Cyberbeveiligingswet cover home care and nursing homes?
Healthcare providers are one of the sectors in the law, so a nursing home or home-care organisation is covered once it reaches 50 FTE, or exceeds the EU ceiling for both turnover and balance sheet. Covered organisations register with the NCSC and report significant incidents. A small team below those limits is normally outside the law but still bound by NEN 7510.
Does Mindtime help with NEN 7510 audits?
Mindtime is audited against NEN 7510 and ISO 27001 and supplies a data processing agreement with every contract. You can use both in your own risk analysis and supplier register. Your organisation's own NEN 7510 measures, such as access policies and staff awareness, remain your responsibility.
See it with your own data
Book a 15-minute demo
We show you a backup and a restore, and answer your questions in Dutch, German or English. No offshore call centres, no chatbots.