The Short Answer
A safe offload copies every camera card to at least two separate drives, verifies each copy against the original with a checksum, writes a log, and only lets the card be formatted after a named person has signed off. Do it with software built for the job rather than dragging folders in Finder or Explorer, because those tools tell you the copy finished, not that it is identical.
This checklist is for the person offloading, whether that is a DIT, a second AC, or a producer who is doing it themselves on a small shoot. For the wider role, read our DIT workflow guide.
Why a Checksum, Not a Glance
A checksum is a short fingerprint calculated from the contents of a file. If a single bit differs between the original and the copy, the fingerprints will not match. Dragging a folder only confirms that the copy operation finished, and an eyeball check of file sizes will not catch a flipped bit or a partly written clip.
Offload tools calculate a checksum while they copy, then verify. Pomfort's documentation for Silverstack, for example, says it re-reads the source after each copy by default, which can also detect read errors. Common choices for the hash are xxHash, which is very fast and not designed for security, and MD5, which is older and widely supported. For offloads, speed and accuracy matter more than cryptographic strength, so check which one your DIT, your post house or your insurer expects, and use the same one on every card.
The Offload Checklist
Before the shoot
- Agree on the offload tool, the checksum type, and who owns the offload.
- Label every card and every drive with unique IDs, for example A001 for the first camera A card.
- Prepare at least two destination drives, plus a third for delivery to the lab if the schedule needs it. Format them and test that they mount.
- Write down the naming convention (below) and put it where the team can see it.
- Run a test offload with a real card so you know the speed and the software settings work.
At the card swap
- Do not format a card in camera until it has been offloaded and verified, and the person responsible says it can go back into circulation.
- Log the card: roll, camera, date, time received, who received it.
- Mount the card read-only if you can, and use a reader that supports the card's maximum speed.
- Copy the whole card, not just the clips folder. Camera systems store metadata outside the clip folders, and some post tools need it.
During the offload
- Copy to two destinations at the same time or in sequence, with checksum verification turned on.
- Watch for errors and warnings. A single failed file means the whole card needs to be looked at again.
- Do not eject a card or drive while the tool is still writing or verifying.
- When it finishes, save the report: file list, hashes, date and any warnings.
After the offload
- Spot-check that clips play from one of the copies, not just from the card.
- Confirm that the file count and total size match the source.
- Mark the card as offloaded in the log, with the destination drive names and the initials of the person who verified it.
- Keep the card unformatted until your team's rule is met. Many teams hold cards until the footage has been verified in post or backed up to a third location. Your producer, insurer or buyer may have its own rule, so ask.
- End of day: seal the volume or finish the log, and store the drives in separate bags or locations.
What Is ASC MHL?
The American Society of Cinematographers' Media Hash List (ASC MHL) is a specification for recording file hashes in a standard format. It follows the older Classic MHL files, which Silverstack and other tools still support. According to the ASC specification and tool vendors' documentation, a history is stored as manifests plus a chain file, and every operation such as an offload, backup or verification adds a new generation, so you can see where in the chain a file stopped matching.
In practice:
- Pomfort's Silverstack made ASC MHL the default hash manifest in version 9.0, and its article describes sealing each volume at the end of the shoot day so post knows the package is complete.
- In post, a tool such as MediaVerify checks the folder against the history. It first scans for missing or new files, then hashes every file and compares it, and a pass requires that the history be complete and all hashes match.
- If a file fails, the generation history helps you find where the content changed.
Not every tool supports it, so ask what your post team can read.
A Naming Convention for Offloads
Pick one, write it down and never improvise. A pattern that works for many small teams:
- Destination folder: DATE_CAMERA_CARD, for example 2026-10-16_A_A001
- Day folder: SHOOTDAY_DATE, for example D03_2026-10-16
- Drive label: PROJECT_OFFLOAD_01, PROJECT_OFFLOAD_02
- Do not rename camera clips that the camera numbered. Many post tools relink from the original names. Add metadata in your log instead.
Our project folder structure guide shows how this fits into the rest of the project.
Backups and Transport
- Copy 1 stays on set until the shoot day is complete.
- Copy 2 goes to the post house or the producer's location in a different bag or vehicle.
- A third copy to a cloud service or an offsite drive is a good idea for anything you cannot reshoot. For the cloud choices, see cloud storage for video professionals.
- Never transport all copies together.
Common Mistakes
- Formatting a card because the transfer bar said 100 percent
- Offloading to one drive and calling it backed up
- Switching checksum types halfway through a shoot
- Renaming clips on the card before the copy
- Skipping the log on busy days
- Ejecting drives before the verify finishes
Want a person to help?
If you want a data workflow set up before the shoot, including the offload tool, naming, reports and handoff to post, our production consulting team can help. See our DIT workflow consulting, or tell us about your shoot and a real person on our team will reply.
Offload camera cards safely with checksum verification
Set the rules before the shoot
Agree on the offload tool, checksum type, naming convention, destination drives and who signs off.
Log the card
Record the card ID, camera, time and who received it before copying.
Copy the whole card to two drives
Use offload software with checksum verification turned on and copy the full card structure.
Review the report
Check for warnings, confirm file counts and sizes, and save the report with the footage.
Spot check playback
Play clips from a copy, not from the card.
Sign off and store separately
Mark the card as verified, release it only on approval, and store the drives in different places.
Questions people ask
Why use checksums when copying camera cards?
A checksum proves that the copy matches the original bit for bit. A normal drag and drop tells you the copy finished, not that every file is identical.
Which checksum should I use, xxHash or MD5?
xxHash is fast and common in offload tools, and MD5 is older and widely supported. Check which one your DIT, post house or insurer expects, and use the same one for the whole shoot.
When is it safe to format a camera card?
Only after the card has been copied to at least two locations, verified, logged, and a named person has approved the format. Some productions also wait until footage is checked in post. Follow your producer's and insurer's rules.
What is ASC MHL?
It is a standard from the American Society of Cinematographers for recording file hashes as a history of manifests and a chain file, so each copy or verification step can be checked later.
Written by the team at Clouds Agency, a Los Angeles creative and production consulting agency.