How Long Should Security Cameras Keep Footage?

Most business owners set their security cameras to 30-day loop recording and assume that is enough. In practice, that number is often too short — and discovering you needed footage that no longer exists is a costly lesson. This guide explains how long you should keep footage, what drives that number for different industries, how to calculate the storage you actually need, and how to build a retention policy that does not leave gaps.

The 30-Day Floor and Why 60-90 Days Is Safer

Thirty days has become the informal floor for commercial security camera retention, and for most low-risk business environments it is technically acceptable. The reasoning is straightforward: most incidents — theft, vandalism, slip-and-fall accidents — are discovered and reported within a few days of occurring. If you review footage within a week of an event, 30 days gives you plenty of runway.

The problem is that discovery and reporting are two separate timelines. An employee might notice a pattern of inventory discrepancy three weeks after the theft began. A customer who slipped in your parking lot may not file a claim for four to six weeks while they evaluate their medical costs. An insurance adjuster investigating a loss may not request footage until 45 days after the incident. In all of these cases, a 30-day retention window has already overwritten the relevant footage.

The safer standard for most commercial businesses is 60 to 90 days. At 60 days you cover the realistic window for most claims and investigations. At 90 days you are protected against slower-moving legal and insurance timelines. The storage cost difference between 30 and 90 days is real, but it is far smaller than the cost of a single liability case where you cannot produce video evidence.

There is also the investigation delay factor. If a theft investigation takes two to four weeks to identify a suspect, you may need footage from a period that began before the first incident was noticed. Building in buffer beyond the initial 30-day floor is simply good risk management.

Industry-Specific Retention Guidelines

Different industries face different liability timelines, and some face regulatory guidance on top of that. Here is a practical breakdown:

Retail

Retail environments should target 90 days as the standard. Slip-and-fall claims are the primary driver — plaintiffs in personal injury cases often have months to file, and insurers need footage to defend against questionable claims. Inventory shrinkage investigations can also span weeks before a pattern becomes clear enough to escalate. Organized retail crime cases frequently require footage from multiple dates to document a pattern of behavior, making 90-day retention a practical necessity.

Financial Services and Banking

Financial institutions typically maintain footage for 90 to 180 days. Check fraud, account takeover, and internal theft investigations often take longer to surface because the discrepancy has to work through reconciliation processes before it is flagged. Regulatory examinations can also request surveillance footage as part of an audit, and those requests may arrive well after the original event.

Healthcare Facilities

90 days is a common starting point for healthcare environments, though state-specific regulations vary and can push requirements higher. Patient safety incidents, workplace injuries, and visitor access disputes are the primary drivers. The specific rules around video in healthcare settings are complex and state-specific — consult your compliance team and legal counsel to determine what applies to your facility.

Construction Sites

A minimum of 30 days is the floor for active construction sites, but given that theft investigations typically take two to four weeks to identify suspects and build a case, 60 days is more practical. Equipment theft, materials theft, and vandalism investigations benefit from having footage that predates the discovery of a loss — if someone has been taking small loads of copper wire over three weeks, a 30-day window may barely capture the start of the pattern.

Property Management and Multi-Tenant Buildings

60 days is the recommended standard for apartment complexes, commercial office buildings, and mixed-use properties. Lease disputes, tenant damage claims, and unauthorized access complaints often come to a head at move-out, which can be 30 to 60 days after the incident in question. Common-area incident claims from tenants or guests follow a similar delayed reporting pattern.

The Insurance Angle

Your security camera retention policy is not just an operational decision — it may have insurance implications. Some commercial property and general liability policies include documentation requirements that reference surveillance footage. If a claim is filed and you cannot produce footage because your system overwrote it, your insurer may have grounds to reduce or deny the claim.

More immediately, some insurers offering security discounts for monitored camera systems may ask about your retention settings as part of their underwriting questionnaire. A verified 90-day retention policy is more credible evidence of a functional security program than a 30-day setting that barely covers the claim window.

Review your policy addendum — specifically the sections covering evidence preservation, claims documentation, and security system requirements. If your current retention window falls short of what your insurer expects, that is a configuration change worth making before you need to file a claim, not after.

How to Calculate Storage Needed

The formula for estimating camera storage is:

Resolution x Frame Rate x Compression Factor x Number of Cameras x Retention Days = Total Storage

Here is a concrete example using a common commercial deployment: eight cameras recording at 4MP resolution, 15 frames per second, continuously, for 30 days.

• A single 4MP camera at 15 fps continuous generates approximately 50 GB per day without compression.
• H.265 (HEVC) compression reduces that by approximately 30-40%, bringing it to roughly 30-35 GB per camera per day.
• Eight cameras x 35 GB/day x 30 days = 8.4 TB for 30 days of retention.
• Extend to 90 days and that becomes approximately 25 TB.

In real-world deployments, mixed motion-triggered and continuous recording, varying traffic levels, and differences in scene complexity mean actual storage consumption is typically 20-30% lower than theoretical maximums. A realistic estimate for eight 4MP cameras at 15 fps with H.265 compression is 7-9 TB for 30 days and 21-27 TB for 90 days.

Higher frame rates (30 fps vs. 15 fps) roughly double storage consumption. If you are recording at 4K (8MP), storage requirements are approximately double those of 4MP at equivalent settings. Always size your storage to the higher end of your estimate — you can throttle retention down if needed, but running out of capacity during an active investigation is not recoverable.

NVR Hard Drive Sizing

A practical rule of thumb for commercial NVR systems: budget 1 TB per camera per 7-14 days at typical settings (4MP, 15 fps, H.265, mixed motion/continuous). That gives you:

• 4 cameras x 30 days = 8-16 TB of raw drive capacity needed
• 8 cameras x 30 days = 16-32 TB
• 8 cameras x 90 days = 48-96 TB

Most commercial NVRs ship with 4 to 8 drive bays. A 4-bay unit with 8 TB drives gives you 32 TB raw capacity — enough for 8 cameras at 30 days. To reach 90-day retention on 8 cameras, you typically need an 8-bay NVR with 8-12 TB drives, or a RAID array with expansion.

If you are running RAID — which you should be, since drive failure is a matter of when, not if — account for parity overhead. RAID 5 on a 4-drive array sacrifices one drive worth of capacity for redundancy. A 4 x 8 TB RAID 5 array gives you 24 TB usable, not 32 TB. Factor this into your sizing before purchasing drives.

Drive longevity matters too. Surveillance-rated drives (WD Purple, Seagate SkyHawk) are designed for 24/7 continuous write cycles. Standard desktop drives in an NVR will fail earlier and are not covered under warranty for this use case.

Motion-Triggered vs. Continuous Recording

The recording mode you choose has a significant impact on both storage consumption and the completeness of your footage archive.

Motion-triggered recording activates the camera only when the NVR detects movement in the frame. In low-traffic areas — storage rooms, server closets, side entrances rarely used — motion-triggered recording can cut storage consumption by 60 to 80 percent compared to continuous recording. For those same areas, the footage you do capture is also easier to review, since you are not scrubbing through hours of empty hallway.

Continuous recording captures every second, regardless of activity. High-traffic areas — main entrances, cash registers, loading docks, parking lots — should always run continuous. Motion detection can miss slow-moving targets or events that occur at the edge of the detection zone, and in a high-stakes environment those gaps are unacceptable.

The recommended approach for most commercial deployments is a mixed strategy: continuous recording on cameras covering primary entry points, transaction areas, and any location where a liability event is likely; motion-triggered recording on cameras in secondary spaces where storage savings are meaningful and the risk of missed events is low. This strategy can reduce total storage consumption by 30-50 percent while maintaining full coverage where it counts.

Cloud Backup as Secondary Storage

Cloud storage for security camera footage is frequently marketed as a primary storage solution, but at commercial scale it is usually better suited as a secondary backup for critical clips rather than a replacement for local NVR storage.

The economics make this clear: a single 4MP camera recording continuously at 15 fps generates roughly 1 TB per month. At typical cloud storage pricing, storing footage from eight cameras for 90 days would cost hundreds of dollars per month in storage fees alone, before accounting for egress costs when you actually need to retrieve the footage. Local NVR storage, once the hardware is purchased, has effectively zero ongoing cost per gigabyte.

Where cloud storage adds real value is as a redundant copy of high-priority clips. Many commercial NVRs support automatic cloud offload — when a motion event is flagged or an alarm is triggered, the relevant clip is automatically uploaded to cloud storage. This protects critical footage against the most common failure modes: NVR theft, hard drive failure, or physical damage to the camera system. If someone steals both your merchandise and your NVR, cloud-backed clips still exist.

What Happens When Storage Fills Up

By default, nearly every commercial NVR operates on loop recording: when the drives are full, the system automatically overwrites the oldest footage to make room for new recordings. This is normal, expected behavior — the alternative is that the system stops recording entirely when storage is full, which is far worse.

The risk with loop recording is straightforward: if you discover a 45-day-old incident and your NVR is configured for 30-day retention, that footage is gone. There is no recovery path. The system has already overwritten it to accommodate newer recordings.

This is the most concrete operational argument for setting retention at 60 to 90 days rather than 30. Incidents are not always discovered immediately. A slip-and-fall victim who is uncertain about whether to pursue a claim may take six weeks to consult an attorney and formally request footage. An employee theft investigation may not surface until payroll discrepancies are caught at month-end close. In both cases, a 30-day loop has already destroyed the evidence.

Some NVRs allow you to manually lock specific clips to prevent them from being overwritten during loop recording. This is useful once you know an event occurred — but it requires someone to actively flag the footage before the loop catches up to it.

Setting and Maintaining Your Retention Policy

The single most common retention failure is not a hardware problem or a storage calculation error — it is simply that no one set a deliberate policy in the first place. A retention policy should be established before your system is deployed, documented in writing, and reviewed on a regular schedule.

Here is a practical framework:

• Set the target before deployment. Decide on your retention window (30, 60, or 90 days) based on your industry, your insurance requirements, and your risk tolerance. Configure the NVR to match before the system goes live.
• Document it. Write down the retention setting, the date it was configured, and who is responsible for reviewing it. This documentation becomes relevant if you ever need to demonstrate due diligence in a legal or insurance context.
• Review quarterly. Hard drives fail, firmware updates can reset configuration settings, and staff turnover can result in someone inadvertently changing recording modes or retention windows. A 15-minute quarterly check — verify the retention setting, review remaining drive capacity, confirm all cameras are recording — catches these issues before they matter.
• Check after any firmware update. NVR and camera firmware updates occasionally reset storage and recording configuration to factory defaults. Always verify your settings immediately after an update.
• Alert on drive failure. Configure your NVR to send email or push alerts if a drive fails or if remaining storage drops below a threshold. Discovering a failed drive 90 days after it died — and realizing you have had no footage for three months — is avoidable with basic monitoring.

Retention policy is not a set-it-and-forget-it configuration. It is an ongoing operational responsibility that protects your business the same way your insurance policy does — you want it in place and working long before you need it.

If you are designing a new camera system or evaluating your current setup, our team can help you right-size storage for your specific camera count, resolution, and retention requirements. Schedule a no-obligation assessment and we will walk through your environment before recommending anything.

About the Author

Kevin Harkins is the Director of Sales at Edge CCTV, where he has spent 10 years helping business owners design and implement commercial security camera systems across Atlanta, Birmingham, Chattanooga, and beyond. Starting as an Outside Sales Representative and working his way up through Sales Manager to Director of Sales, Kevin has guided hundreds of businesses through the process of evaluating, specifying, and installing the right system for their facility. More from Kevin Harkins.