For lawyers: what a Witness evidence package contains, and what it does and does not prove
A precise account for people who will have to rely on, or challenge, the record.
A client, a witness or an organisation hands you video recorded with Witness. This page explains what comes with it, what each part establishes and what it leaves open, so you can advise on its use without overclaiming. It is not legal advice and makes no claim about admissibility in any court. This guide is written by the developer of Witness Camera, so read it with that in mind. Everything about other tools comes from their own sites and store listings, and where Witness is the weaker choice, it says so.
Short answer. Witness footage comes with a manifest (every file's SHA-256 hash, UTC capture times and GPS accuracy) and an independent RFC 3161 time-stamp of that manifest, which anyone can check with OpenSSL. Pro adds an evidence package: a PDF report with the timeline, device, first location fix, segment hashes and verification steps, plus the manifest and time-stamp proof, with no video. Together they show the footage existed in this form at a time and has not changed since. They do not show what it depicts, who held the phone, or whether a court will admit it. Keep originals, never edit, and log who has had custody.
What the client gives you
- The video files, either as individual chunks or as consolidated recordings.
- The manifest,
manifest_<session-id>.json: every chunk's SHA-256, capture start and end times in UTC, and GPS coordinates with accuracy. - The time-stamp token,
timestamp_<session-id>.tsr, a signed RFC 3161 response from an independent authority over a hash of the manifest. - Optionally, with Pro, an evidence package: a PDF report plus the manifest and token. The report covers the recording's start and end, time zone, number of segments, capture device, first location fix, the hashes of each segment and any merged video, and the steps to verify them. It contains no video.
What this establishes
Each video file hashes to a value in the manifest, so the footage is what the phone recorded. The manifest hashes to the value in the token, and a third party with no stake in the matter signed that value at a stated time. Together they establish that the footage existed in this form at that time and has not been modified since. Anyone can verify the chain with OpenSSL, without the app or the developer.
What it does not establish
- What the footage depicts, or whether it is a fair picture of events.
- Who held the phone, or whether the device clock was right. The token shows the manifest cannot postdate it, and corroborates the capture times without replacing them.
- Location beyond the GPS's accuracy, recorded per chunk.
- Admissibility. That is a question for the court and the rules where you practise.
- A missing token means no independent time proof, not that the footage is false.
Advising the client
- Keep the originals. The whole session folder, never forwarded through an app that re-encodes video. A re-encoded copy will not match the manifest.
- Never edit the original. Cutting, blurring or compressing goes on a copy.
- Keep a log of custody: who copied it, when, and to where. The WITNESS organisation's guidance treats an unbroken chain of custody as an important indicator of authenticity, and the Berkeley Protocol on Digital Open Source Investigations stresses authenticity and chain of custody.
- Think about who the footage shows. It can identify third parties, including minors. Take advice before publication or disclosure.
- For a contested matter, consider a forensic examiner. The record helps them. It does not replace them.
The device and the account
Footage sits in the client's own Google Drive, Dropbox, Nextcloud or WebDAV account, which is subject to the provider's legal process. The developer has no copy and no server and cannot retrieve, confirm or produce footage. Witness always records sound, which some laws restrict, so check the recording rules where the footage was made.
Questions
What does a Witness evidence package contain?
A PDF report with the recording's timeline, time zone, number of segments, capture device, first location fix, segment hashes and verification steps, plus the manifest and the time-stamp proof where one was obtained. It contains no video.
Is Witness footage admissible in court?
We make no claim about admissibility. The record shows the footage existed in this form at a time and has not changed since. Whether a court admits it is for the court and your jurisdiction's rules.
How do I check a client's Witness footage?
Hash each video and compare with the manifest, then run openssl ts -verify on the manifest with the time-stamp authority's CA certificate. Our newsroom guide gives the commands.
What should I tell clients before they record?
Connect their own storage, test it, keep the whole session folder, never edit the original, and avoid sending it through apps that re-encode video.
Try it free first
The free app already has the parts that protect and verify footage. Pro is unlocked from inside it, and its controls are visible before you pay.
More guides by profession
- Witness for journalists: footage that survives a seized phone and shows where it came from
- For newsrooms: how to verify footage recorded with Witness in ten minutes
- Witness for documentary and investigative filmmakers: picture quality with provenance
- Witness for legal observers and legal-support teams
- Witness for NGOs and human rights teams: a field documentation workflow
- Tamper-evident documentation for work sites, tenancies and damage claims
- Is Witness Pro worth it? Who should pay, and who should not
- Witness for Professionals: how Witness Pro works
Written on 27 October 2026. Features and prices change. This is not legal advice.