Backup services

Mindtime

Immutable business backup in Dutch and German data centres

NetherlandsEUEU hosted Ownership reviewed, controller unresolvedHigh non-EU dependency

Scope verdict

Ownership reviewed, controller unresolved

Mindtime Backup B.V. (KvK 51172313, Ridderkerk) joined the Dutch IT company IT22 in April 2025 and is now part of Group22. Register data lists Group22 B.V. as owner and director, but Group22’s shareholders are not public. The ultimate controller is therefore unresolved, and Mindtime stays outside the verified European-controlled recommendations.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 7 non-European infrastructure or email dependencies across 5 providers: Ahsay, Amazon SES, Google, HubSpot, Microsoft. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

Mindtime backs up Microsoft 365, Google Workspace, VMware, Hyper-V and Proxmox virtual machines, Linux servers, databases, NAS devices and laptops, and copies AWS, Azure and Google Cloud data out of the hyperscaler. Backups are immutable, with Object Lock storage and an air-gapped copy, and Mindtime says it restore-tests every job automatically. Restores range from one email or file to a whole virtual machine.

Founded in 1998, Mindtime has focused on online backup since 2004. It sells mostly through MSPs and IT partners, who get a multi-tenant console, white-label options and an EDR platform for their clients’ endpoints. Disaster recovery with failover and runbooks, and documentation for NIS2 Article 21 audits, are available on top. Support is personal, in Dutch, German and English.

Pricing

Microsoft 365 and Google Workspace backup costs €3.50 per user per month, billed annually, with unlimited storage and a 7-day free trial. Other workloads, disaster recovery and MSP plans are priced on request.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Core service hosting

Mindtime-owned racks in Dutch and German data centres

Provider control not verified
Location
Netherlands and Germany (Mindtime claim)
Observed
Mindtime says backups are stored only on its own infrastructure in Tier III data centres in the Netherlands and Germany, without hyperscalers, using Object Lock immutability and an air-gapped copy. It does not name the data-centre operators or the German site and publishes no subprocessor list. Its Microsoft 365 and Google Workspace agreement allows third-party software, platforms and hosted storage, listed on request.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 smtp.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Incoming business email

Microsoft 365

Non-European provider
Observed
The customer backup portal domain mindtimebackup.eu and the older mindtime.nl, mindtimebackup.nl and mindtimebackup.de domains publish MX records at mail.protection.outlook.com, so email to those addresses enters Microsoft 365.

Why this matters

Published MX records route incoming business email through Microsoft 365. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Google Workspace

Non-European provider
Observed
The mindtime.eu SPF policy includes _spf.google.com, authorising Google to send domain email. SPF does not show which messages it actually sends.

Why this matters

This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

HubSpot

Non-European provider
Observed
The mindtime.eu SPF policy includes 146198491.spf06.hubspotemail.net, authorising HubSpot to send domain email, typically marketing and sales mail. SPF does not show active use.

Why this matters

This domain authorises HubSpot to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Amazon SES

US-controlled cloud
Observed
The mindtime.eu SPF policy includes amazonses.com. SPF does not show which messages, if any, are sent through Amazon SES or from which region.

Why this matters

This domain authorises Amazon SES, infrastructure under US ultimate ownership, to send email. If active, recipient details and message content can be processed there. SPF does not prove active use, the selected AWS region, or use of the separately operated AWS European Sovereign Cloud.

Public website

IT22 servers at Equinix Amsterdam

Provider control not verified
Location
Amsterdam, NL
Observed
mindtime.eu resolved to 80.252.82.65 on 21 October 2026, in a block registered to IT22 as an Equinix customer, with Amsterdam Geo-IP. The customer backup portal domain mindtimebackup.eu resolved to 80.252.86.57 in the same block. Website routing does not establish where backups are stored.

Authoritative DNS

Google Cloud DNS

Non-European provider
Observed
Authoritative NS records for mindtime.eu point to ns-cloud-b1 to b4.googledomains.com. The portal and older domains use TransIP nameservers. This is a DNS availability dependency, separate from backup storage.

Why this matters

Google Cloud DNS resolves domain names to service addresses. This is an active availability dependency: a DNS disruption can prevent connections. DNS queries and related metadata are distinct from the audio, video and files exchanged with the service; DNS use alone does not show that this provider hosts that content.

Supporting services

Ahsay

Non-European provider
Location
Hong Kong (vendor); licence server on Microsoft Azure, Singapore
Observed
Ahsay's customer story quotes Mindtime's director saying the service has run on Ahsay backup software for 20 years; the current Mindtime site does not name its backup software. Ahsay is Cayman-incorporated, Hong Kong-listed and 75% family-held. AhsayCBS must reach lic.ahsay.com for daily licence checks and stops after 14 days without one. lic.ahsay.com resolved to a Microsoft Azure address in Singapore on 21 October 2026. No backup data flow to Ahsay is documented.

Why this matters

The published disclosure lists Ahsay for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More from Netherlands