Trades, logistics & industry
Backup for manufacturing SMEs: CAD files, ERP and machine data
Mindtime backs up the file servers, ERP databases, virtual machines and engineering workstations of your production company to its own Tier III data centres in the Netherlands and Germany. Backups are immutable, one copy is air-gapped, and Disaster Recovery keeps critical systems available on standby infrastructure.
In Dutch, German or English.
- NL · DEStored only in our own Tier III data centres in the Netherlands and Germany
- ImmutableObject Lock storage plus an air-gapped copy; every backup job is checked
- ISO 27001 · NEN 7510Audited security, with a data processing agreement in every contract
- NL · DE · ENSupport from people, no offshore call centres or chatbots
In short
Manufacturing companies need backup because CAD models, CNC programs and ERP data are the memory of the production line, and technical files usually have to be kept for ten years. Mindtime backs up the servers, databases, NAS units and workstations that hold them, stores immutable copies in the Netherlands and Germany and tests Disaster Recovery every quarter.
What's at stake
The data manufacturing and production companies (SME) can't afford to lose
CAD models and CNC programs
3D models, drawings and the CNC programs derived from them represent years of engineering. They often exist only on the engineering server and a few workstations.
Technical files
Risk analyses, test reports and the technical file behind each CE-marked product must stay available for years after the product is sold.
ERP and production planning
Bills of materials, work orders, stock and supplier data in your ERP decide what runs on the shop floor today. When the ERP database is gone, planning stops.
Rules and obligations
What the rules ask of manufacturing and production companies (SME)
Summarised from the sources listed at the bottom of this page. This is general information, not legal advice.
Technical file: usually ten years
Manufacturers must draw up a technical file with the risk analysis, the design and key characteristics of the product, applicable standards and test reports. It usually has to be kept for 10 years after the product is placed on the market, and for some products 20 years. [1]
NIS2 Annex II: listed manufacturing
The Cyberbeveiligingswet lists manufacturers of medical devices, computer, electronic and optical products, electrical equipment, machinery and equipment not elsewhere classified, motor vehicles, trailers and semi-trailers, and other transport equipment. [2]
Size decides
Within those sectors, the law covers medium-sized organisations (at least 50 employees, or annual turnover and balance sheet total above €10 million) and large ones. Food production and chemicals are separate listed sectors. [3]
Duties and supervisor
In-scope manufacturers must register, take measures that include business continuity such as backup management and recovery plans, secure their relationships with direct suppliers and report significant incidents. For manufacturing, the supervisor is the RDI. [2]
In force since 15 August 2026
The Cyberbeveiligingswet, the Dutch implementation of NIS2, has applied since 15 August 2026, and organisations that fall under it must register in the entity register. [4]
When it goes wrong
Ransomware through a remote session
Illustrative example: a mid-sized machine builder runs its ERP database and engineering file server on a Hyper-V host. Ransomware arrives through a remote maintenance session and encrypts the host. Mindtime's immutable backups are untouched, so the company restores the virtual machines in an isolated environment, has them scanned for malware and starts them on standby infrastructure while the factory network is cleaned. Because it is in scope of the Cyberbeveiligingswet, it also sends its early warning to the CSIRT within 24 hours.
How Mindtime protects it
Backup for manufacturing and production companies (SME), workload by workload
- VMware and Hyper-V backupERP, file and engineering servers usually run as virtual machines that can be restored or failed over as a whole.
- Database backupERP and PDM systems keep their data in SQL Server or similar databases that need consistent backups.
- NAS backupDrawing archives and machine backups on a Synology or QNAP NAS need a copy outside the factory.
- Laptop and endpoint backupEngineering workstations and shop-floor PCs hold files that never reach the server.
- Disaster RecoveryWhen the ERP stops, production planning stops; standby infrastructure keeps it running.
- NIS2 ComplianceManufacturers in listed subsectors with 50 or more employees must show backup management and recovery plans.
The software you use, and what we protect around it
| SOLIDWORKS (Dassault Systèmes) | 3D CAD models and drawings stored on engineering workstations or a file server. Mindtime backs up both, so a failed workstation does not cost you a design. |
|---|---|
| AutoCAD (Autodesk) | 2D and 3D drawing files used across production and maintenance. Mindtime protects the NAS, server or laptop where they are saved. |
| Isah | ERP for manufacturing companies such as machine builders and metal fabricators. If Isah runs on your own server, Mindtime backs up that server and its database; for a cloud setup, check Isah's export and retention terms. |
| Ridder iQ (ECI) | ERP for the manufacturing industry. On your own hardware, Mindtime protects the server and its database; in a hosted setup, ask the supplier about exports and retention. |
| CNC programs and machine parameter files | Often kept on a shop-floor PC. Mindtime backs up Windows and Linux PCs and servers, so that PC is not the only copy. |
Before you switch
What manufacturing and production companies (SME) ask us first
Our production network is separate. Isn't that enough?
Separation helps, but your data still needs a copy outside your own network. Mindtime keeps immutable copies under Object Lock plus an air-gapped copy, and scans backups for malware before a restore.
We already back up to a NAS in the factory.
A NAS in the same building shares the same fire, flood and ransomware risk. Mindtime backs up that NAS to its own data centres in the Netherlands and Germany, following the 3-2-1-1-0 rule.
Our environment is too specific for a standard package.
Enterprises can get a custom solution with the IT22 development team, part of Group22 alongside Mindtime. A free 15-minute demo is the place to scope it.
FAQ
Questions about backup for manufacturing and production companies (SME)
Does NIS2 apply to my manufacturing company?
Check two things: what you make and how big you are. Listed activities include electronics, electrical equipment, machinery, motor vehicles, other transport equipment and medical devices. If you make one of those and have at least 50 employees, or turnover and balance sheet above €10 million, you are likely in scope. If not, customers who are in scope may still ask about your security as a supplier.
How long should we keep CAD and technical files?
The technical file for a CE-marked product usually has to be kept for ten years, and for some products twenty. Your CAD models and drawings underpin that file, so it makes sense to retain them at least as long. Agree retention per product line and make sure your backups cover the full period.
Can we test recovery without stopping production?
Yes. A Mindtime DR test uses standby infrastructure rather than your production systems. After onboarding, the first test failover is typically done within 10 days, and from then on the test is repeated each quarter, which also gives you a record of recovery testing.
Which systems in a factory can Mindtime protect?
VMware, Hyper-V and Proxmox virtual machines, Linux servers, SQL Server, MySQL, PostgreSQL, MariaDB and Oracle databases, Synology and QNAP NAS units, Windows, macOS and Linux workstations, Microsoft 365 or Google Workspace, and workloads in AWS, Azure and Google Cloud. Machine controllers themselves are out of scope; back up their programs from a PC.
Is backup data encrypted and access controlled?
Yes. Data is encrypted with AES-256 in transit, admin actions require multi-factor authentication, and backups are stored only in Mindtime's own Tier III data centres in the Netherlands and Germany. Mindtime is ISO 27001 and NEN 7510 audited and signs a data processing agreement with every contract.
See it with your own data
Book a 15-minute demo
We show you a backup and a restore, and answer your questions in Dutch, German or English. No offshore call centres, no chatbots.