Healthcare
Data backup for physiotherapy practices
Your practice software runs online, but your mail, shared files, exported reports and laptops do not back themselves up. Mindtime makes immutable copies of them in its own data centres in the Netherlands and Germany.
In Dutch, German or English.
- NL · DEStored only in our own Tier III data centres in the Netherlands and Germany
- ImmutableObject Lock storage plus an air-gapped copy; every backup job is checked
- ISO 27001 · NEN 7510Audited security, with a data processing agreement in every contract
- NL · DE · ENSupport from people, no offshore call centres or chatbots
In short
Physiotherapy practices need a backup alongside their online practice software, because mail, referral letters, exported reports and laptops sit outside it. Physiotherapists are BIG-registered care providers who keep patient files for 20 years. Mindtime backs up Microsoft 365 or Google Workspace and laptops to NEN 7510-audited data centres in the Netherlands and Germany.
What's at stake
The data physiotherapy practices can't afford to lose
Treatment records and measurements
Intake notes, treatment goals, outcome measurements and progress notes show why you treated a patient the way you did. Insurers and colleagues may ask for them years later.
Letters to GPs and specialists
Reports to referring GPs and medical specialists, and their replies, often live in Outlook or Gmail as well as in the patient file. A hijacked or deleted mailbox takes that trail with it.
Exercise programmes and group classes
Home exercise programmes, instruction videos and lists for group training are built up over years in shared folders. Recreating them costs therapists hours they would rather spend with patients.
Rules and obligations
What the rules ask of physiotherapy practices
Summarised from the sources listed at the bottom of this page. This is general information, not legal advice.
A BIG-registered profession
Fysiotherapeut is one of the professions in the Dutch BIG register, alongside doctors, dentists and pharmacists. As a care provider you fall under the rules for medical files and their security. [1]
Patient files kept for 20 years
Every care provider keeps a medical file per patient and stores it for 20 years from the last change to that file, under the WGBO in Book 7 of the Dutch Civil Code. [2]
NEN 7510 as the security baseline
The Wabvpz states that care providers must arrange their information security according to NEN 7510, with the IGJ as supervisor. That covers the practice's mail, files and devices too, not only the patient software. [3]
Ransomware counts as a data breach
The Dutch Data Protection Authority says that files with personal data encrypted by ransomware are a data breach, because someone must have had access to encrypt them. [4]
Larger physiotherapy groups and NIS2
Healthcare providers with 50 FTE or more fall under the Cyberbeveiligingswet. Most physiotherapy practices are below that size; a group of practices under one organisation should check. [5]
When it goes wrong
A phished mailbox at a group practice
Illustrative example: a therapist at a group practice enters her password on a fake login page. The attacker sends phishing mail to referrers from her account and deletes her mailbox contents and the shared folder with exercise programmes to cover his tracks. After the account is secured, the practice restores the mailbox and the folder from Mindtime's backup, taken before the attack. The practice then assesses whether the incident has to be reported to the AP.
How Mindtime protects it
Backup for physiotherapy practices, workload by workload
- Microsoft 365 backupReferral mail and shared folders in Microsoft 365 need a copy outside Microsoft's own retention.
- Google Workspace backupPractices on Gmail and Google Drive need protection against deleted files and hijacked accounts.
- Laptop and endpoint backupLaptops and treatment-room PCs hold exported reports and exercise videos.
- NAS backupPractices that keep video libraries on a Synology or QNAP box need that copy off-site.
The software you use, and what we protect around it
| Intramed | Online practice software for physiotherapists and other allied health professionals. Check Intramed's export and retention terms; Mindtime protects the mail, files and laptops around it. |
|---|---|
| SpotOnMedics (HCI) | Cloud practice software for physiotherapists. The supplier runs the platform; Mindtime backs up the Microsoft 365 or Google Workspace and devices your practice uses alongside it. |
| Microsoft 365 or Google Workspace | Practice mail, referral reports and shared folders with exercise programmes. Mindtime backs up either environment. |
| Laptops and treatment-room PCs | Exported reports, videos and documents saved locally. Mindtime backs up Windows and macOS computers and mobile devices. |
Before you switch
What physiotherapy practices ask us first
Our practice software is in the cloud, so we're covered.
Your software supplier covers its own platform. Your mailboxes, shared folders and laptops are your responsibility, and that is where referral letters and exercise programmes live. Mindtime protects those, in its own data centres in the Netherlands and Germany.
We don't have time to manage another system.
Mindtime monitors backups 24/7 and checks every backup job, so a problem reaches us rather than waiting for you to notice it. When you have a question, a person answers in Dutch, German or English.
Will our patient data be stored with an American cloud provider?
No. Mindtime keeps backups only in its own Tier III data centres in the Netherlands and Germany, audited against ISO 27001 and NEN 7510. A data processing agreement is part of every contract.
FAQ
Questions about backup for physiotherapy practices
How long must a physiotherapy practice keep patient files?
Twenty years from the most recent change to the file, under the WGBO. That applies to physiotherapists as BIG-registered care providers. A backup does not replace the file, but it means the file and the correspondence around it survive a deleted account, a stolen laptop or ransomware.
Does Microsoft or Google back up our practice mail?
They keep their services running and offer limited recovery of deleted items, but they do not keep an independent copy for you. Mindtime backs up Microsoft 365 and Google Workspace to its own data centres, and you can test either with a 7-day free trial.
Does the Cyberbeveiligingswet apply to our practice?
Only if your organisation has 50 FTE or more, or exceeds the EU ceilings for both turnover and balance sheet. That is rare for a physiotherapy practice. The NEN 7510 security duty under the Wabvpz applies regardless of size, and backup is part of keeping data available.
How does a restore work after an attack?
Mindtime scans backups for malware and supports isolated recovery, so restored data can be checked before it goes back into use. Because the backups are immutable, an attacker could not have changed or deleted them after they were made, so you restore from a known clean point.
See it with your own data
Book a 15-minute demo
We show you a backup and a restore, and answer your questions in Dutch, German or English. No offshore call centres, no chatbots.