Witness CameraWitness for NGOs and human rights teams: a field documentation workflow
Where footage goes, who can see it, and what to decide before anyone goes into the field.
Civil-society teams that document events need footage to survive, a record that can be checked, and a clear answer to who holds the material. Witness is built around those three, with limits that matter for teams working in higher-risk settings. This guide is written by the developer of Witness Camera, so read it with that in mind. Everything about other tools comes from their own sites and store listings, and where Witness is the weaker choice, it says so.
Short answer. For NGOs, Witness offers upload during recording to storage you control, SHA-256 hashing, a manifest and an independent time-stamp, with no developer server in the middle. The decisions that matter are the storage provider (a team Nextcloud or WebDAV avoids US cloud providers but cannot share automatically; Google Drive and Dropbox can), a device policy (passcode, location, sound) and training. Witness is not an encryption or concealment tool, always records sound, and has no team console. Teams at serious risk should compare Tella, ProofMode and eyeWitness.
The decisions to make before the field
- Where footage goes. Google Drive or Dropbox: simplest, and supports automatic access for an emergency contact, but footage is reachable by legal process served on a large US provider. Nextcloud or WebDAV on a server you or a partner run: no US provider in the middle, but no automatic sharing.
- Who the emergency contact is. A named coordinator, not a personal contact who may be unreachable.
- Location and sound. Location is optional and some guides advise against it. Sound is always recorded.
- Device policy. A six-digit passcode instead of biometrics, a full battery and a power bank, and a test recording before every deployment.
- What gets published. Raw footage stays in team storage. Anything published is a blurred copy, reviewed, with minors and bystanders protected.
How Witness fits
- No developer server. Footage goes from the phone to the account you connected, and the only other thing that leaves is a hash of the manifest, sent to the time-stamp authority. The developer cannot see, retrieve or produce footage.
- Evidence packages (Pro) turn a finished recording into a PDF report a lawyer or a funder can read, with the manifest and time-stamp proof and no video.
- Start in one press and a field guide for training new staff.
Where to look at other tools
From their own sites, read on 27 October 2026: Tella (Horizontal, a US nonprofit) is free and open source, encrypts files as they are captured, hides them from the gallery and can disguise the app. ProofMode (Guardian Project, WITNESS and partners) is free, open source and built around provenance. eyeWitness to Atrocities (a UK charity) sends footage into a chain of custody for legal use and is built for documenting international crimes. Witness is different in one respect: it uploads private footage to your own storage in pieces while you are still recording. See our comparison for where each wins.
Limits to state plainly to your team
- It does not conceal recording: iOS shows a green indicator and Android a notification.
- It always records sound, with no switch to turn the microphone off.
- It has no accounts, admin console or central server. Access is managed in your storage provider.
- A hash shows a file is unchanged. It does not show what the footage depicts.
Pro for teams
- Evidence packages, burned-in date, time and location, and quality settings are bought per person in the app store. The one-time purchase is $29.99 on the US App Store, and monthly is $1.99. There is no volume licence or team plan that we know of.
Questions
Is Witness suitable for high-risk human rights work?
It protects footage by uploading it during recording and makes it verifiable, but it does not encrypt or conceal. For people at serious risk, compare Tella and ProofMode and use Witness as one layer.
Can we use our own server?
Yes. Nextcloud and WebDAV are supported. They keep footage away from US cloud providers, but they cannot share recordings with an emergency contact automatically.
Does the developer see our footage?
No. There is no server and no account system. Footage goes from the phone to the storage you connected. A hash of the manifest goes to the time-stamp authority, which learns nothing else.
Is there a team plan?
Witness has no team console, and Pro is bought per person through the app store. We know of no volume licence.
Try it free first
The free app already has the parts that protect and verify footage. Pro is unlocked from inside it, and its controls are visible before you pay.
More guides by profession
- Witness for journalists: footage that survives a seized phone and shows where it came from
- For newsrooms: how to verify footage recorded with Witness in ten minutes
- Witness for documentary and investigative filmmakers: picture quality with provenance
- For lawyers: what a Witness evidence package contains, and what it does and does not prove
- Witness for legal observers and legal-support teams
- Tamper-evident documentation for work sites, tenancies and damage claims
- Is Witness Pro worth it? Who should pay, and who should not
- Witness for Professionals: how Witness Pro works
Written on 27 October 2026. Features and prices change. This is not legal advice.