How to Back Up Footage on a Shoot (2026 On-Set Data Guide)

Key Takeaways

• Three card states: full, copied, verified. Only verified cards may be formatted.
• A successful copy is not evidence. Verification means comparing checksums, not watching a progress bar finish.
• Three copies, two devices, one leaving the location, every day, before anyone goes to sleep.
• Make the physical protocol visible. Card orientation in a wallet beats memory at eleven at night.
• Never format in camera to make space. It is the most common way footage is actually lost.

The Three Card States

The entire discipline reduces to keeping three states distinct and never acting on the wrong one.

Full. The card holds footage that exists nowhere else. This is the highest-risk object on the production, and there should be as few of them at any moment as the shoot allows. A full card should never leave the person responsible for it, should never go in a pocket with keys, and should never be handed to somebody without saying what it is.

Copied. The files now exist in another location, but nothing has confirmed they arrived intact. This state feels safe and is not. A copy can complete successfully and still contain a truncated file, a corrupted clip, or a silently skipped directory.

Verified. Offload software has compared checksums between the source and the destination and confirmed every file matches byte for byte. Only now is the card genuinely redundant, and only now may it be formatted.

The failure mode is always the same: somebody treats a copied card as a verified one, because the copy said it worked. The card gets formatted, and three days later a clip will not open.

Make the states physical rather than remembered. The standard technique is a card wallet where full cards sit label-up and empty cards sit label-down, or vice versa, chosen once and never varied. Then the state of every card in the production is legible at a glance, by anyone, without a conversation.

Verification: Why "It Copied Fine" Is Not Enough

Dragging files in a file browser copies data and reports success based on whether the operation completed, not on whether the result is identical to the source. Bit errors, interrupted writes, and faulty cables produce copies that look complete and are not.

Checksum verification computes a mathematical fingerprint of each source file and the copied file and compares them. If they match, the copy is provably identical. If they do not, you find out while the card is still in your hand rather than three weeks later.

This is what dedicated offload software does, and it is the entire reason to use it instead of a file browser. Tools in this category also copy to multiple destinations at once, generate a report you can keep, and preserve the camera's folder structure and metadata sidecars.

Keep the verification reports. They are the evidence that a card was safe to format, and on a professional production they are part of the paperwork.

Verification takes time. Budget for it. On a large card it can take as long as the copy itself, and a shoot that has not allowed for it is a shoot that will skip it.

The Rule, Applied to a Shoot Day

Three copies, on two different physical devices, with one copy off the location.

Copy one: the working drive. What the editor will actually use.

Copy two: a separate physical drive. Not a second partition, not a second folder, a different device that can be dropped without taking the first with it.

Copy three: off-site. Cloud upload where bandwidth allows, or a drive that physically leaves with a different person. On a location shoot the simplest version is that two crew members carry one drive each and do not travel in the same vehicle.

The camera card counts as a copy only until it is formatted, which is why cards are the cheapest insurance in production. Buy enough that you can leave a day's material on them until the material has been verified in three places.

Do it before sleeping, not in the morning. The morning version is how a whole day gets lost to an overnight theft or a hotel fire, which sounds dramatic until it happens to someone you know.

The Offload Station

One person owns it, by name. On a small crew this is often the person with the laptop, and the important thing is that it is not ambiguous.

Set it up somewhere it will not be moved, with power, and away from where people are packing.

Use a card reader, not the camera. Cameras are slow, drain batteries, and put wear on a port you need.

One card at a time, start to finish. Copy, verify, mark the state, then move to the next. Overlapping cards is how one gets missed.

Never rename or reorganise during offload. Copy the card structure exactly as it is. Renaming happens later, during ingest, and renaming during offload is a good way to break the relationship between a clip and its metadata.

Label the destination folders by date and card, so the structure is legible without opening anything.

Do not do anything else while offloading. Editing, browsing, or unmounting the wrong drive mid-write are all avoidable and all common.

A Worked Example: The End of a Shoot Day

The protocol as an actual sequence, because a principle that is not a sequence gets skipped when people are tired.

Two things about this sequence matter more than they look.

Step five is the whole system. Flipping the card the moment verification passes is what makes the state physical rather than remembered, and remembering is what fails at the end of a long day.

Step nine happens last, deliberately. Formatting is the only irreversible action in the list, so it sits after everything that could tell you not to do it. A production that formats at step three to get ahead has removed its own safety net for no gain.

If you are shooting again tomorrow and the copies are still running, you sleep with the cards unformatted and you use fresh ones. That is what having enough cards is for.

Multi-Day and Remote Shoots

The off-site copy is the hard part when you are travelling, and it is also when you most need it. Cloud upload over a hotel connection may not be feasible for high-bitrate material, in which case physical separation is the answer: two drives, two people, two bags.

Never let both copies travel in the same bag. This is the single most common way a well-run production still loses everything.

Check drive health before you leave, not after. A drive that fails on day one of a remote shoot is a problem with no local solution.

Take more cards than you think you need so material can stay on them longer when the offload situation is unreliable.

On long shoots, verify the working drive periodically, because drives degrade and a corrupted file discovered in week three is recoverable from the other copies only if you notice.

When a Card Fails

Rare, and this is what to do.

Stop using it immediately. Do not shoot more to it, do not format it, do not run repair utilities. Every write reduces what can be recovered.

Do not let the camera reformat it, even when prompted. That prompt appears at exactly the wrong moment.

Copy the raw card image first if you can, so recovery attempts happen on a copy rather than on the only remaining original.

Try recovery software on the copy. Many cases are a corrupted file table rather than lost data, and the clips are still physically present.

For genuinely critical material, stop and use a professional recovery service. They are expensive and they are far cheaper than a reshoot, and amateur attempts frequently make professional recovery harder.

Then retire the card. A card that has failed once is not trustworthy, and the cost of a new card is not a real consideration next to the cost of finding out again.

After the Project

Archive is not the same as backup. Backup protects work in progress. Archive is the long-term copy you keep after delivery.

Keep camera originals, not just the export. A finished file cannot be re-graded, reframed, or recut.

Two archive copies in different places, because a single archive copy is a single point of failure with a very long exposure window.

Include the project files, the log, and the licence documentation, not only the media. A project you cannot reopen is only partially archived.

Check archive drives periodically. Drives left unpowered for years fail silently, and discovering that during a reissue request is too late.

Common Mistakes

Treating a completed copy as a verified one. The root cause of most real losses.

Formatting in camera to free space. Fast, tempting, and irreversible.

Both copies in the same bag. Defeats the entire point of having two.

Offloading in the morning. Leaves a night of exposure for no reason.

Nobody specifically responsible. Shared responsibility for cards means intermittent responsibility.

Renaming during offload. Breaks the link between clips and their metadata.

Reusing a card that has already failed once. Saving the cost of a card against the cost of a shoot day.

No verification reports kept. No evidence a card was safe to format.

Quick Picks: Tools for On-Set Backup

Best for verified offload: dedicated offload software. Hedge, ShotPut Pro, and Silverstack all copy to multiple destinations simultaneously with checksum verification and generate reports. Silverstack goes furthest into full data-management workflows for larger productions. Pricing varies by product and tier (verify current pricing).

Best free option: free offload tools with checksum support. Several exist and are genuinely adequate for small productions. The requirement is checksum verification, not the brand.

Best hardware approach: two physically separate drives plus a fast card reader. The reader is the bottleneck on a long shoot day and is worth spending on.

Best for the off-site copy: cloud sync where bandwidth allows, otherwise physical separation with two people carrying two drives.

For tracking what has been offloaded: a written card log, or Storyflow if the shoot plan already lives there. One line per card with date, camera, state, and destinations. Storyflow's Free plan is $0; Plus is $7.99/month billed annually. The honest limit: it copies nothing, verifies nothing, and a printed sheet on the offload station works better on the day.

Pricing checked July 2026. Competitor pricing changes often and varies by product and tier, so verify on each vendor's page before quoting it.

The Bottom Line

Data management is the least interesting part of a shoot and the only part where a mistake cannot be undone. Everything else has a version of the day where you recover. This does not.

Three states: full, copied, verified. Only verified cards get formatted, and verification means a checksum comparison rather than a progress bar reaching the end. Three copies on two devices with one leaving the building, completed before anyone sleeps. One named person who owns it. Cards physically oriented so their state is visible without a conversation.

None of it is clever, and that is deliberate, because it has to work at the end of a fourteen-hour day when everyone wants to go home. A copy is not a backup until something has checked it. Until then it is a hope.

Author

Justkay is a documentary filmmaker and the founder of Storyflow. He has run data on small documentary crews where the person offloading the cards was also the person who shot them, which is where a mechanical protocol earns its keep.