Creative & technical
Backup for MSPs and IT service providers, under your own name
Mindtime gives MSPs one multi-tenant console to back up client Microsoft 365, Google Workspace, servers and endpoints to immutable storage in its own Dutch and German data centres. Pay as you grow, add REST APIs and hooks to your own tooling, and offer it white-label.
In Dutch, German or English.
- NL · DEStored only in our own Tier III data centres in the Netherlands and Germany
- ImmutableObject Lock storage plus an air-gapped copy; every backup job is checked
- ISO 27001 · NEN 7510Audited security, with a data processing agreement in every contract
- NL · DE · ENSupport from people, no offshore call centres or chatbots
In short
MSPs need backups that sit outside their own tooling, because an attacker who takes over a remote management account can reach every client at once, and managed service providers now fall under NIS2. Mindtime gives partners a multi-tenant console, white-label options and pay-as-you-grow billing, with immutable copies in its own Tier III data centres in the Netherlands and Germany.
What's at stake
The data mSPs and IT service providers can't afford to lose
Every client's data, in one place
You hold the backups of dozens of organisations. One failed restore costs you a client, and a breach of your tooling can cost you all of them.
Your management access
Remote management, admin accounts and documentation give you the keys to every client network. That makes the MSP itself a target, and its backups must survive an attack that starts with your own credentials.
Proof for contracts and audits
Clients, auditors and insurers ask for evidence that backups run and restores work. Job reports and test results are part of what you deliver, not an afterthought.
Rules and obligations
What the rules ask of mSPs and IT service providers
Summarised from the sources listed at the bottom of this page. This is general information, not legal advice.
The law defines managed service providers
The Cyberbeveiligingswet defines a managed service provider as an entity providing services related to the installation, management, operation or maintenance of ICT products, among other things. A managed security service provider is a managed service provider that also assists with cybersecurity risk management. [1]
A sector of high criticality: NIS2 Annex I
ICT service management (business-to-business) is listed in Bijlage 1 of the Cyberbeveiligingswet, the sectors of high criticality that follow Annex I of NIS2. The RDI supervises the sector, and the law requires measures that include backup management and recovery plans. [2]
Size criteria still apply
MSPs are not on the list of entities covered regardless of size. The law applies from 50 employees, or with both turnover and balance sheet total above €10 million, with partner and linked companies counted. Smaller MSPs should still check with the RDI self-assessment. [4]
Register, and report incidents within 24 hours
The Cyberbeveiligingswet took effect on 15 August 2026. Organisations that fall under it must register in the entity register and report significant incidents to the CSIRT as soon as possible, and in any case within 24 hours. [5]
Processor for every client
When you manage systems that hold your clients' personal data, you act as their processor under a processing agreement. After a data breach you must inform each affected client as soon as possible. [6]
When it goes wrong
Stolen technician credentials, many clients at once
Illustrative example: an attacker steals a technician's password at a small MSP and uses the remote management tool to push ransomware to several client networks in one night, encrypting servers and the local backup appliances. The Mindtime backups are immutable and one copy is air-gapped, and admin actions in the Mindtime console require MFA, so the stolen password alone could not touch them. The MSP restores client by client into isolated environments, starting with the clients whose operations have stopped. Meanwhile it informs every affected client and checks whether the incident must be reported under the Cyberbeveiligingswet.
How Mindtime protects it
Backup for mSPs and IT service providers, workload by workload
- EDR / RMM PlatformThe EDR / RMM platform lets you manage and protect client endpoints alongside their backups.
- Microsoft 365 backupMost small and mid-sized clients run on Microsoft 365, and its data needs a copy outside Microsoft.
- VMware and Hyper-V backupClient servers usually run as virtual machines on VMware or Hyper-V.
- Laptop and endpoint backupLaptops of client staff hold work that never reaches a server.
- Disaster RecoveryStandby infrastructure lets you get a client running again while their own hardware is replaced.
- NIS2 ComplianceMSPs are named in NIS2, and many of their clients are in scope too.
The software you use, and what we protect around it
| Microsoft 365 Lighthouse | Microsoft's portal for managing clients' Microsoft 365 tenants from one place; it manages, it does not back up. Mindtime backs up each client's mailboxes, OneDrive and SharePoint from its own multi-tenant console. |
|---|---|
| HaloPSA | PSA for MSPs that runs in Halo's cloud or on-premise. If you host it yourself, Mindtime backs up that server; Mindtime's REST APIs and hooks are there for your own automation around it. |
| Client hypervisors: VMware, Hyper-V and Proxmox | Mindtime backs up virtual machines on VMware, Hyper-V and Proxmox at client sites to its own data centres, with disaster recovery as an option. |
| Client Synology and QNAP NAS devices | Small clients often keep everything on one NAS. Mindtime copies it off-site to immutable storage. |
| Client endpoints | Laptops and desktops are backed up by Mindtime and can be managed and protected with Mindtime's EDR / RMM platform, from the same partner relationship. |
Before you switch
What mSPs and IT service providers ask us first
Our margins are too thin for up-front licence commitments.
Mindtime bills partners pay-as-you-grow, so what you pay grows with the clients and data you actually protect. Book a free 15-minute demo and Mindtime's partner team will walk you through the terms.
Our clients know our brand, not yours.
That can stay that way. Mindtime offers white-label options, so clients see your service while the data sits in Mindtime's own Tier III data centres in the Netherlands and Germany.
Another console means more work for our engineers.
Mindtime's multi-tenant console shows all clients in one place, and every backup job is checked and monitored around the clock. With REST APIs and hooks, your team can fit Mindtime into its own scripts and processes.
FAQ
Questions about backup for mSPs and IT service providers
Are managed service providers covered by NIS2?
Yes, by sector. ICT service management (business-to-business), meaning managed service providers and managed security service providers, is one of the high-criticality sectors in the Cyberbeveiligingswet, following Annex I of NIS2. Size criteria apply, so MSPs from 50 employees, or above the financial thresholds, must register and comply. The RDI supervises.
What does Mindtime's partner programme include?
A multi-tenant console for all your clients, pay-as-you-grow billing, REST APIs and hooks for your own tooling and white-label options. Next to backup and disaster recovery, partners can use Mindtime's EDR / RMM platform for client endpoints. Support comes from Mindtime's own people in Dutch, German or English.
What is the EDR / RMM platform?
EDR stands for endpoint detection and response, RMM for remote monitoring and management. Mindtime's platform is the one MSP partners use to look after their clients' endpoints, next to the backups in the same partner relationship. Book a demo to see what it covers for your client base.
Where is our clients' data stored, and under what agreement?
Client data is stored in Mindtime's own Tier III data centres in the Netherlands and Germany and nowhere else. Mindtime signs a data processing agreement with every contract, is audited against ISO 27001 and NEN 7510, encrypts data in transit with AES-256 and requires MFA for admin actions. That gives you clear answers for your own clients' agreements.
Can we offer disaster recovery to clients?
Yes. Mindtime keeps standby infrastructure on which client servers can run while their own environment is restored. A first test failover typically takes place within 10 days of starting, and DR is tested every quarter, which gives you results to show clients and auditors.
See it with your own data
Book a 15-minute demo
We show you a backup and a restore, and answer your questions in Dutch, German or English. No offshore call centres, no chatbots.