Estate Planning · Collection Documentation
Digital Files & Backups
Digital collection records can make an orderly inheritance, valuation or sale possible. They can also become useless in a moment if they are locked inside an inaccessible computer, scattered across online services, stored in obsolete formats or dependent upon passwords and knowledge that die with the collector.
Estate-ready digital preservation is therefore not simply an IT task. It is the work of keeping the collection's records discoverable, intelligible, authentic, secure, recoverable and lawfully accessible - while preserving the relationships between each physical object, its identity, its evidence, its location and the collector's intentions.
Collector scenario
The collection survived; its meaning did not
An executor opens a room containing thirty boxes of role-playing games, loose maps, counters, magazines and apparently duplicate modules. The collector's laptop holds a detailed database, but the login is unknown. The photographs are stored in a cloud account controlled by a cancelled phone number. A portable drive sits beside the computer, yet nobody knows whether it is current, encrypted or the only copy.
The physical objects are present, but the evidence that distinguished first printings from later copies, linked loose components to boxed sets, recorded restoration and identified valuable provenance is inaccessible. The risk is not only that files will be lost. It is that rare material will be mistaken for ordinary material, related items will be separated, certificates will be discarded and the collection will be sold as an undifferentiated job lot.
A comparatively modest estate-access pack - a readable inventory export, a location schedule, stable identifiers, a contact list and documented recovery route - could have changed the whole outcome.
Chapter 1
The digital archive is part of the collection
A physical collection may survive for generations while the knowledge surrounding it disappears in a single hardware failure or inaccessible account. The archive may contain the only evidence of what was owned, where it came from, whether it was genuine or restored, which components belong together, what an insurer accepted and how the collector wanted the material handled.
For an executor, documentation is practical infrastructure. It supports identification, custody, valuation, insurance, distribution and disposal. The record is not a decorative catalogue sitting beside the objects; it is the bridge between the collector's expertise and the decisions another person must eventually make.
Chapter 2
What belongs in the digital collection archive
The archive should contain enough information for someone unfamiliar with the collection to reconstruct the collector's understanding of it. Not every minor object requires the same depth, but every significant item or deliberately managed group needs an identity, a location and a route to its supporting evidence.
Master inventory
The authoritative list of objects or defined groups, using stable identifiers and recording identity, quantity, condition, completeness, location, ownership, value, insurance status and review date.
Photographic record
Overall views, identifying details, labels, serial numbers, condition evidence, packaging, accessories and group photographs showing which components belong together.
Acquisition and ownership evidence
Invoices, receipts, auction confirmations, saved listings, payment records, customs documents, transfer agreements, gifts, inheritance records and prior-ownership statements.
Authentication and provenance
Certificates, grading reports, expert opinions, scientific results, catalogue references, exhibition history, correspondence and records of disputed or uncertain attribution.
Condition and treatment history
Dated condition photographs, assessments, treatment proposals, restoration invoices, treatment reports, materials used, reversibility notes and future handling instructions.
Valuation and insurance evidence
Formal valuations, insurance schedules, auction estimates, comparable sales, dealer offers and notes explaining the purpose and date of each figure.
Location and access records
The property, room, cabinet, shelf, box or external custodian for each object, together with access constraints, keys, appointments, hazards and fragility warnings.
Collection-management instructions
A plain-language guide to exceptional objects, linked components, trusted specialists, incomplete records, doubtful material and preferred or prohibited disposal routes.
Chapter 3
Separate masters, working records and estate-access copies
One file should not be forced to perform every role. The best-preserved version, the version used in daily work and the version prepared for an executor have different purposes. Layering them protects authoritative evidence without making the estate dependent upon technical expertise.
Authoritative
Preservation masters
The best available version of important material: original camera files, high-resolution scans, signed reports, original invoices, native database backups and unedited documentation photographs.
- Retain without routine overwriting.
- Keep their provenance and original metadata where possible.
- Restrict editing to controlled copies.
Everyday use
Working copies
Copies used for annotation, editing, sharing, printing, uploading and normal reference. These may be resized, reformatted or simplified without replacing the master.
- Make changes here rather than in the master.
- Name versions clearly.
- Retain a route back to the authoritative record.
Succession
Estate-access copies
A deliberately simplified set that an executor can use without specialist software: inventory PDF and spreadsheet, essential photographs, location schedule, system register, contacts and a read-me file.
- Readable on an ordinary current computer.
- Explains where fuller evidence is held.
- Does not expose unnecessary credentials or private data.
Chapter 4
Synchronisation, backup and archive are not interchangeable
Collectors often use the word backup for any second place where a file appears. That creates false confidence. A synchronised folder can repeat a deletion; a backup can restore a lost file but preserve no explanation of it; an archive can preserve meaning but still be vulnerable if no recoverable copies exist.
Convenience
Synchronisation
Keeps files aligned between devices or a cloud service. It is useful for daily access, but deletion, corruption or ransomware may also be synchronised. Version history helps only for as long as it remains available and usable.
Recovery
Backup
A recoverable copy made so information can be restored after deletion, hardware failure, theft, fire, malware, account failure or user error. Its value is proven by restoration, not by a success notification.
Continuity
Archive
A deliberately managed body of records retained for long-term evidential or historical use. It preserves context, authority, relationships and meaning rather than merely duplicating files.
Chapter 5
Build a backup structure that can survive the same event
The familiar 3-2-1 principle - three copies, two storage arrangements or media, one off-site - remains a useful starting point. For estate documentation, strengthen it by keeping a dated estate snapshot and ensuring that at least one copy cannot be immediately altered or deleted by the live system.
Copy 1
Working system
The live inventory and supporting records used by the collector on a computer, network device or collection-management platform.
Copy 2
Local backup
An automated or routine copy on an external drive, separate computer or network storage device. It should not be the only other copy.
Copy 3
Off-site backup
A copy held in reputable cloud backup, another property, secure professional storage or with an authorised custodian.
Copy 4
Estate snapshot
A dated, stable export of the essential archive made periodically and after significant collection or estate changes. At least one copy should be protected from immediate alteration or deletion.
First priority
Preserve access and stop avoidable loss
Secure the devices and physical collection, avoid cancelling important subscriptions, identify the current inventory, and prevent deletion, overwriting or hurried disposal.
Second priority
Create independent readable exports
Export inventory data, photographs and documents from live systems into ordinary formats before accounts, applications or payment methods fail.
Third priority
Verify recovery and meaning
Restore representative files, confirm that identifiers still connect records to objects, and ask a knowledgeable person whether the archive can be interpreted correctly.
Fourth priority
Improve long-term preservation
Migrate obsolete media, create protected snapshots, add checksums where proportionate, document dependencies and separate confidential material from the general estate pack.
Chapter 6
Do not let one application or file format become the estate plan
Specialist collection software can preserve rich relationships, but an estate should not depend upon the continuing operation of a single application, subscription or proprietary format. Every important dataset should have both a structured export and a human-readable form.
Inventory and structured data
Retain the native database backup or application export, a spreadsheet such as XLSX or ODS, a simple structured export such as CSV, and a human-readable PDF report.
Documents
Use PDF for convenient final reference, while retaining editable source files where future revision may matter. Keep high-quality scans for critical certificates, invoices and reports.
Photographs
Retain high-resolution originals. JPEG is practical for ordinary access, TIFF for high-quality preservation scans, PNG for screenshots and diagrams, and original camera files where their metadata or image information matters.
Important correspondence should not remain only inside a live mailbox. Preserve a readable PDF, an EML or equivalent export where message metadata matters, and attachments in their original formats.
Web listings and online evidence
A bookmark is not an archive. Save important pages as PDF, screenshots, downloaded images and copied descriptive text, together with the URL and the date accessed.
Database-specific preservation package
A database may contain relationships that a PDF cannot reproduce: multiple valuations, linked components, controlled vocabularies, image paths and separate document stores. Preserve the native backup, full data exports, a field or data dictionary, human-readable reports, linked media folders, the software name and version, and instructions for reconstructing links.
For a custom-built collection system, also preserve the database schema, configuration information, deployment notes and source code where appropriate - but always include a non-technical export. Executors should not have to rebuild an abandoned application before they can identify the collection.
Chapter 7
Make the archive understandable without the collector's memory
Stable identifiers, consistent file names and a simple folder structure do more than create tidiness. They preserve relationships when links break, software changes or files are copied outside the original system.
File-naming judgement
Include the stable collection identifier, a meaningful record type and an unambiguous date where relevant.
COLL-00482_1985-TSR-Module_B1_Front_2026-07-15.jpg
COLL-00482_Auction-Invoice_2021-10-22.pdf
COLL-00482_Condition-Report_v03_2026-07-15.pdf
Version judgement
Distinguish current, master, prior, working, duplicate and obsolete records. Avoid names such as final-new-2 or latest-copy that conceal sequence and authority.
Earlier valuations, photographs and attribution opinions may remain historically important. Mark them as superseded, corrected, withdrawn or disputed rather than silently deleting the record of change.
A simple estate archive structure
Collection Estate Archive ├── 00_READ_ME ├── 01_MASTER_INVENTORY ├── 02_ITEM_RECORDS │ ├── COLL-00001 │ │ ├── Photographs │ │ ├── Acquisition │ │ ├── Provenance │ │ ├── Condition │ │ ├── Valuation │ │ └── Correspondence ├── 03_INSURANCE ├── 04_STORAGE_LOCATIONS ├── 05_CONTACTS ├── 06_ESTATE_INSTRUCTIONS ├── 07_SOFTWARE_EXPORTS └── 08_BACKUP_AND_SYSTEM_INFORMATION
The structure need not be elaborate. Consistency, stable identifiers and a clear read-me are more valuable than complexity that only the collector understands.
Chapter 8
Preserve metadata, integrity and evidential context
Metadata may record creation date, author, photographer, camera details, copyright, file format, version, source and relationships to other records. It can be stripped by messaging services, screenshots, simplified exports or print-and-rescan workflows. Important facts should therefore also appear in the inventory rather than existing only inside technical file properties.
Metadata risk
A file may remain visible while losing the information that explains who created it, when, from what source and for which object.
Checksum value
Checksums can reveal corruption, incomplete copying or later alteration. They help show whether a file changed; they do not prove that its original contents were true.
Authenticity judgement
Evidential confidence comes from source, context, consistency, custody, metadata and preservation history. A backup protects availability, not truthfulness.
Chapter 9
Cloud services introduce succession dependencies
Cloud platforms can improve resilience and access, but they also create dependencies upon account ownership, payment, email control, two-factor authentication, provider survival and export quality. The estate needs a register of what each service contains and what happens when the collector can no longer maintain it.
Questions the system register must answer
- Which service contains the records, and who owns the account?
- Which email address, payment method and second factor control access?
- What happens if payment stops or the account becomes inactive?
- Can the full dataset, images, documents and relationships be exported?
- Where are recovery codes and emergency-access instructions held?
- Does the provider offer a legacy-contact or deceased-user process?
Export before trust
A platform export should be inspected before it is relied upon. Some exports contain raw tables only, omit images, use unexplained internal identifiers or fail to preserve links visible inside the application.
Cards may be cancelled, bank accounts frozen, email accounts lost and subscriptions allowed to lapse after death. The executor guidance should identify services that must remain active temporarily and material that should be exported immediately.
Chapter 10
Balance encryption with lawful executor access
An unencrypted archive may expose values, addresses, signatures, purchase history, correspondence, financial details and security arrangements. An encrypted archive may be effectively destroyed if the recovery key dies with the collector. Estate planning must solve both problems at once.
Chapter 11
Devices and media must also be discoverable
The executor cannot recover an archive that nobody can locate. Record the existence and location of computers, laptops, phones, tablets, external drives, USB devices, memory cards, network storage, hardware security keys and printed recovery information.
Label physical media with purpose, last-update date, encryption status and whether it is a working, backup or archive copy. Do not attach the decryption key to the drive. Replace vague statements such as "everything is on the computer" with a precise device and location description.
Media do not preserve themselves
Hard drives, solid-state storage, optical discs, connectors, chargers, file systems and encryption software all fail or become obsolete. Migration is an active process: copy to current media, verify completeness, open representative files, check metadata and folder relationships, and keep the old medium until the replacement is proven.
For a personal collection, a roughly five-year media review is a useful prompt rather than a guarantee. Review earlier when hardware becomes unreliable, interfaces disappear or the archive becomes materially more important.
Chapter 12
Test recovery, not merely backup completion
Many collectors trust backup software they have never used to restore anything. A successful backup notification proves only that a process reported success. A recovery test proves whether the expected material can be retrieved and understood.
A meaningful recovery test confirms that:
- the expected folders and recent changes are present
- inventory exports open and remain readable
- representative photographs are not corrupted
- encrypted archives can be unlocked using the documented route
- passwords, recovery keys or emergency-access steps still work
- relationships between identifiers, files and objects remain understandable
- a sample restoration succeeds on a different computer
- the person expected to use the system can follow the instructions
Chapter 13
Prepare an executor's digital collection pack
The executor should be able to begin safely without first understanding the collector's entire technical environment. The pack is an orientation and action tool, not a complete duplication of every record.
Read-me and authority
- Explain what the archive is, when it was last updated and which inventory is authoritative.
- Describe the folder structure and the meaning of identifiers.
- Name the person who can help interpret the collection or technical system.
Inventory and priorities
- Provide inventory copies as PDF, spreadsheet and structured export.
- Identify high-value, fragile, easily misidentified or externally held objects.
- Flag groups, sets or archives that must not be separated.
Location and systems
- Map object identifiers to property, room, cabinet, shelf, container or custodian.
- List software, online platforms, controlling accounts, renewal status and export method.
- State where lawful access instructions and recovery information are held.
Backups and recovery
- List each copy, what it contains, where it is held and whether it is encrypted.
- Record the last successful backup and the last successful recovery test.
- Explain which copy should be used first and which should remain untouched as evidence.
Contacts and first actions
- Include relevant valuer, insurer, conservator, dealer, auction house, society, solicitor and technical helper.
- Set out immediate priorities: secure objects, preserve subscriptions, export cloud systems and avoid publishing locations.
- Warn against discarding packaging, certificates, components or apparently duplicate material.
Chapter 14
Choose a review and snapshot rhythm
Frequency should reflect how quickly records change and how much work, evidence or estate clarity could be lost. The more active the collection, the shorter the interval between recoverable copies. Stable estate snapshots can be less frequent, but they should be recreated after major changes.
| Rhythm | Suitable use |
|---|---|
| Continuous or daily | Active inventory, new photographs, current acquisitions, documents being edited |
| Weekly | Ordinary working folders, research notes, correspondence exports, moderate collection activity |
| Monthly or quarterly | Stable off-site snapshots, full media copies, estate-access exports, integrity reviews |
| Annually | Formal review of inventory, access, contacts, formats, services, recovery and estate instructions |
| Immediately after change | Major acquisition or sale, relocation, valuation, reorganisation, restoration or estate-plan change |
Chapter 15
Recognise the failure patterns that create false confidence
Most catastrophic documentation failures do not begin with no system at all. They begin with a plausible arrangement that was never examined from the executor's perspective.
"It is all in the cloud"
The executor may not know which service, which account controls it, how it is paid for, whether it is synchronised or backed up, or how the content can be exported.
"My family knows my password"
They may remember it incorrectly, lose the second-factor device, lack recovery codes or be uncertain whether and how they are authorised to use the account.
"The external drive is the backup"
It may be the only copy, permanently connected, years out of date, encrypted without a recoverable key or stored beside the computer it is meant to protect.
"The collection app contains everything"
The subscription may lapse, the provider may close, or the export may omit photographs, documents, relationships and information visible only inside the application.
"I printed the inventory"
A printout is useful for immediate orientation, but it cannot preserve full-resolution photographs, searchable metadata, attachments, earlier versions or database relationships.
"Automatic backup means it is safe"
A backup process is not trustworthy until representative files have been restored, opened and understood on a separate system.
Chapter 16
Minimum viable and enhanced arrangements
Proportionate estate planning matters. A modest collection does not require institutional digital-preservation machinery, but every collection needs a minimum route from object to record and from failure to recovery.
Minimum viable arrangement
Prevent the common catastrophic failures
- A current inventory with stable object identifiers
- Clear photographs linked to the correct records
- Copies of essential ownership, condition and valuation documents
- Inventory exports as PDF and spreadsheet or CSV
- One local backup and one off-site backup
- A written record of where copies and access instructions are held
- An executor-access method and an annual recovery test
Enhanced arrangement
For high-value or research-significant archives
- Professionally designed exports and data dictionaries
- Controlled metadata and preservation masters
- Checksums, audit trails and read-only snapshots
- Secure versioned cloud backup plus offline copies
- Formal migration and digital-preservation procedures
- Independent copies held by an authorised professional or archive
- A written succession plan for the catalogue or research archive itself
Specialist threshold
Seek specialist help when the archive itself has material value or complexity
Professional digital-preservation, cybersecurity, database or legal advice becomes proportionate where the archive supports very high values, contains sensitive personal or security data, depends upon custom software, includes institutional research, uses complex encryption, has already suffered corruption, or may be transferred to a museum, library or archive.
The threshold is not technical sophistication for its own sake. It is the point at which an error in access, migration, authenticity or confidentiality could cause serious financial, legal, historical or personal harm.
Chapter 17
Carry out an annual digital estate review
The review should be capable of finding both technical failure and documentary drift. A perfectly functioning backup of an outdated inventory is not an estate-ready archive.
Inventory
- Are all material objects recorded?
- Are disposed, gifted or sold items marked correctly?
- Do unidentified or unlinked items remain?
Files and formats
- Do key files still open in current software?
- Are important photographs and documents linked to the correct records?
- Are proprietary or obsolete formats creating a dependency?
Backups
- Did automated backups run as expected?
- Is an offline, immutable or otherwise protected copy current?
- Has a representative recovery test succeeded on another computer?
Access and services
- Can the nominated person locate the instructions?
- Are password-manager, emergency-access and recovery-code arrangements current?
- Can every important service still be exported, and which subscriptions must remain active?
Estate meaning and security
- Are the most important objects and specialist contacts still correctly identified?
- Do beneficiary and disposal instructions reflect current intentions?
- Are confidential, financial and security records separated from general collection information?
Key takeaways
- A collection's digital record is part of its practical and evidential infrastructure.
- Synchronisation, backup and archive solve different problems; an estate-ready system usually needs all three.
- Keep preservation masters, working copies and simplified estate-access copies as distinct layers.
- Never let one device, cloud account, proprietary application or password become the only route to the collection's meaning.
- Use stable identifiers to connect physical objects, photographs, documents, locations and instructions.
- Test restoration on another computer and record the result.
- Balance encryption and confidentiality with a lawful, documented executor-access process.
- Review the archive after major changes and at least annually for access, formats, services, recovery and documentary accuracy.
Continue learning
Location & Access Information
Connect the documentary record to the rooms, cabinets, boxes, external custodians and access constraints surrounding the physical collection.
Back to Collection Documentation
Return to the estate-planning documentation section and its complete sequence of collector records.
Specialist Contacts & Advice Trails
Preserve the human knowledge network that allows executors to identify, value, conserve and dispose of specialist material intelligently.
Related topics
Inventory Structure
Design the master structure that connects identifiers, objects, evidence, locations and estate instructions.
Photographic Documentation
Create image records that remain evidentially useful and can still be matched to the correct physical objects.
Sensitive, Restricted & High-Risk Records
Separate information needed for administration from records that require confidentiality, restricted access or secure destruction.
Keeping Documentation Current
Build a review rhythm so the archive, access arrangements, locations and instructions remain trustworthy over time.