Blog Details

Introduction

CCTV footage can be decisive evidence — in a theft, an assault, a road accident or a workplace dispute, the camera often saw what no witness did. But raw footage pulled straight off a DVR is surprisingly weak on its own. Without proof of where it came from and proof that it has not been altered since, a compelling clip can be picked apart on provenance and integrity long before anyone argues about what it shows. This guide walks through, step by step, how to certify CCTV footage for court in India: how to preserve it, export it, hash it, and produce a proper electronic-evidence certificate using e-Dex, a free offline tool built for exactly this.

Why CCTV Footage Needs a Certificate

CCTV footage is an electronic record, and Indian courts have long expected such records to come with a certificate rather than be accepted on trust. The reason is practical: a video file says nothing about itself. To rely on it, you need to establish the source device that produced it, the time it was recorded, and the integrity of the file as presented — that the bytes have not changed since collection. A certificate is simply the document that records those facts in one place, so the footage arrives in court as a properly documented exhibit. For the legal background, see our explainer on the Section 63 BSA 2023 electronic evidence certificate and the wider guide to electronic evidence certificates in India.

Step 1 — Act Fast and Preserve the Footage

This is the step people get wrong, and it is the most important one. DVR and NVR systems record on a loop and automatically overwrite the oldest footage — often within a few days, sometimes less, depending on the disk size and number of cameras. Once the loop comes around, the footage is gone. Before anything else: secure the recorder, stop new recording over the relevant period (or isolate the device), and note the retention window — how far back the system actually holds. Footage overwritten before it was secured is the single biggest cause of lost CCTV evidence, and no certificate can recover a clip that no longer exists.

Step 2 — Export in the Native Format

With the recorder secured, export the relevant clips from the DVR/NVR. Wherever possible, export in the device's native or original format using its own export function. Avoid re-encoding or "converting" the video to a more convenient format at this stage — converting rewrites the underlying bytes, which changes the file's hash and weakens the link to the original. While you are at it, check the recorder's clock against the real time: clock drift and timezone errors are extremely common, and a few minutes' difference can matter. Note both the device clock reading and the actual time.

Step 3 — Record the Particulars

A certificate is only as good as the details behind it, so write down the particulars while you have access to the system. Capture, at minimum:

• Camera ID / number and its physical location (what it covers).
• DVR/NVR make and model, and firmware where known.
• Storage details — disk capacity, the medium you exported to (USB, hard disk), with serial where available.
• Recording window — the from–to date and time of the footage in question, plus the clock-accuracy note from Step 2.
• Who exported it, when, and how.

Step 4 — Hash the Exported Files

Now fingerprint the exact bytes you exported. Open e-Dex and compute a SHA-256 hash (and, if you wish, MD5, SHA-1, SHA-512 or BLAKE3) over each exported clip. A hash is a unique digital fingerprint: if a single byte of the file changes, the hash changes completely. Recording the hash at collection is what later lets anyone confirm that the clip in the file handed to the court is byte-for-byte the same one you collected — integrity becomes demonstrable rather than asserted.

Step 5 — Generate the Certificate

With the particulars and hashes in hand, produce the certificate. e-Dex's Certificate Generator has a dedicated CCTV / Video Evidence template (and a general Section 63 BSA / 65B electronic-evidence template) that prompts for the camera, the recorder, the recording window and the integrity hashes, and records a MATCH verification confirming the file matches the hash taken at collection. The template enforces the structure so nothing important is left blank, turning loose footage into a single, well-organised document. For a worked example of the layout, see our Section 65B certificate format with an example, and our companion piece on making CCTV and video evidence court-ready.

Step 6 — Sign and Timestamp

Finally, seal the certificate so it is tamper-evident. e-Dex can apply a PAdES digital signature using your Digital Signature Certificate (DSC) via a PKCS#12 keystore, and an RFC-3161 trusted timestamp that proves the certificate existed at a given moment. The signature shows the document has not been altered after signing; the timestamp anchors it in time. Both steps run on a tool that works fully offline, so the footage and the certificate never leave your machine.

Common Pitfalls to Avoid

• Footage overwritten before it was secured — the most common and most fatal mistake. Preserve first (Step 1).
• Wrong DVR clock or timezone — undocumented clock drift undermines the recording window.
• Re-encoding or converting the file — changes the bytes and the hash; keep and certify the original export.
• Missing camera or recorder metadata — without the device particulars, the source can't be established.
• Filming the screen with a phone instead of a proper export — a phone video of a monitor is a copy of a copy, with no link to the original file.

A Note on Legal Advice

e-Dex helps you produce a well-structured, integrity-backed certificate that records the footage's provenance and integrity in court-ready format. It is a tool, not legal advice, and it does not — and cannot — guarantee that any clip will be admitted. Who must depose, how the certificate is tendered, and exactly what the law requires depend on the matter and on the provision as it stands. For those questions, consult a lawyer; e-Dex's job is to make sure the technical side — the hashing, the certificate and the seal — is done properly.

Conclusion

Certifying CCTV footage is not complicated, but the order matters: preserve before the loop overwrites it, export in native format, record the particulars, hash the exact bytes, generate the certificate, then sign and timestamp it. Done in that order, a clip stops being a loose video and becomes a documented exhibit with provable integrity. You can do all of this with e-Dex — the Digital Evidence Integrity Suite, for free and entirely offline. Download e-Dex and certify your CCTV footage the right way — with the final question of admissibility left, as it must be, to the court.