Estate Planning · Collection Documentation

Digital Files & Backups

Digital collection records can make an orderly inheritance, valuation or sale possible. They can also become useless in a moment if they are locked inside an inaccessible computer, scattered across online services, stored in obsolete formats or dependent upon passwords and knowledge that die with the collector.

Estate-ready digital preservation is therefore not simply an IT task. It is the work of keeping the collection's records discoverable, intelligible, authentic, secure, recoverable and lawfully accessible - while preserving the relationships between each physical object, its identity, its evidence, its location and the collector's intentions.

Collector scenario

The collection survived; its meaning did not

An executor opens a room containing thirty boxes of role-playing games, loose maps, counters, magazines and apparently duplicate modules. The collector's laptop holds a detailed database, but the login is unknown. The photographs are stored in a cloud account controlled by a cancelled phone number. A portable drive sits beside the computer, yet nobody knows whether it is current, encrypted or the only copy.

The physical objects are present, but the evidence that distinguished first printings from later copies, linked loose components to boxed sets, recorded restoration and identified valuable provenance is inaccessible. The risk is not only that files will be lost. It is that rare material will be mistaken for ordinary material, related items will be separated, certificates will be discarded and the collection will be sold as an undifferentiated job lot.

A comparatively modest estate-access pack - a readable inventory export, a location schedule, stable identifiers, a contact list and documented recovery route - could have changed the whole outcome.

Chapter 1

The digital archive is part of the collection

A physical collection may survive for generations while the knowledge surrounding it disappears in a single hardware failure or inaccessible account. The archive may contain the only evidence of what was owned, where it came from, whether it was genuine or restored, which components belong together, what an insurer accepted and how the collector wanted the material handled.

For an executor, documentation is practical infrastructure. It supports identification, custody, valuation, insurance, distribution and disposal. The record is not a decorative catalogue sitting beside the objects; it is the bridge between the collector's expertise and the decisions another person must eventually make.

Chapter 2

What belongs in the digital collection archive

The archive should contain enough information for someone unfamiliar with the collection to reconstruct the collector's understanding of it. Not every minor object requires the same depth, but every significant item or deliberately managed group needs an identity, a location and a route to its supporting evidence.

Master inventory

The authoritative list of objects or defined groups, using stable identifiers and recording identity, quantity, condition, completeness, location, ownership, value, insurance status and review date.

Photographic record

Overall views, identifying details, labels, serial numbers, condition evidence, packaging, accessories and group photographs showing which components belong together.

Acquisition and ownership evidence

Invoices, receipts, auction confirmations, saved listings, payment records, customs documents, transfer agreements, gifts, inheritance records and prior-ownership statements.

Authentication and provenance

Certificates, grading reports, expert opinions, scientific results, catalogue references, exhibition history, correspondence and records of disputed or uncertain attribution.

Condition and treatment history

Dated condition photographs, assessments, treatment proposals, restoration invoices, treatment reports, materials used, reversibility notes and future handling instructions.

Valuation and insurance evidence

Formal valuations, insurance schedules, auction estimates, comparable sales, dealer offers and notes explaining the purpose and date of each figure.

Location and access records

The property, room, cabinet, shelf, box or external custodian for each object, together with access constraints, keys, appointments, hazards and fragility warnings.

Collection-management instructions

A plain-language guide to exceptional objects, linked components, trusted specialists, incomplete records, doubtful material and preferred or prohibited disposal routes.

Chapter 3

Separate masters, working records and estate-access copies

One file should not be forced to perform every role. The best-preserved version, the version used in daily work and the version prepared for an executor have different purposes. Layering them protects authoritative evidence without making the estate dependent upon technical expertise.

Authoritative

Preservation masters

The best available version of important material: original camera files, high-resolution scans, signed reports, original invoices, native database backups and unedited documentation photographs.

  • Retain without routine overwriting.
  • Keep their provenance and original metadata where possible.
  • Restrict editing to controlled copies.

Everyday use

Working copies

Copies used for annotation, editing, sharing, printing, uploading and normal reference. These may be resized, reformatted or simplified without replacing the master.

  • Make changes here rather than in the master.
  • Name versions clearly.
  • Retain a route back to the authoritative record.

Succession

Estate-access copies

A deliberately simplified set that an executor can use without specialist software: inventory PDF and spreadsheet, essential photographs, location schedule, system register, contacts and a read-me file.

  • Readable on an ordinary current computer.
  • Explains where fuller evidence is held.
  • Does not expose unnecessary credentials or private data.

Chapter 4

Synchronisation, backup and archive are not interchangeable

Collectors often use the word backup for any second place where a file appears. That creates false confidence. A synchronised folder can repeat a deletion; a backup can restore a lost file but preserve no explanation of it; an archive can preserve meaning but still be vulnerable if no recoverable copies exist.

Convenience

Synchronisation

Keeps files aligned between devices or a cloud service. It is useful for daily access, but deletion, corruption or ransomware may also be synchronised. Version history helps only for as long as it remains available and usable.

Recovery

Backup

A recoverable copy made so information can be restored after deletion, hardware failure, theft, fire, malware, account failure or user error. Its value is proven by restoration, not by a success notification.

Continuity

Archive

A deliberately managed body of records retained for long-term evidential or historical use. It preserves context, authority, relationships and meaning rather than merely duplicating files.

Chapter 5

Build a backup structure that can survive the same event

The familiar 3-2-1 principle - three copies, two storage arrangements or media, one off-site - remains a useful starting point. For estate documentation, strengthen it by keeping a dated estate snapshot and ensuring that at least one copy cannot be immediately altered or deleted by the live system.

Copy 1

Working system

The live inventory and supporting records used by the collector on a computer, network device or collection-management platform.

Copy 2

Local backup

An automated or routine copy on an external drive, separate computer or network storage device. It should not be the only other copy.

Copy 3

Off-site backup

A copy held in reputable cloud backup, another property, secure professional storage or with an authorised custodian.

Copy 4

Estate snapshot

A dated, stable export of the essential archive made periodically and after significant collection or estate changes. At least one copy should be protected from immediate alteration or deletion.

1

First priority

Preserve access and stop avoidable loss

Secure the devices and physical collection, avoid cancelling important subscriptions, identify the current inventory, and prevent deletion, overwriting or hurried disposal.

2

Second priority

Create independent readable exports

Export inventory data, photographs and documents from live systems into ordinary formats before accounts, applications or payment methods fail.

3

Third priority

Verify recovery and meaning

Restore representative files, confirm that identifiers still connect records to objects, and ask a knowledgeable person whether the archive can be interpreted correctly.

4

Fourth priority

Improve long-term preservation

Migrate obsolete media, create protected snapshots, add checksums where proportionate, document dependencies and separate confidential material from the general estate pack.

Chapter 6

Do not let one application or file format become the estate plan

Specialist collection software can preserve rich relationships, but an estate should not depend upon the continuing operation of a single application, subscription or proprietary format. Every important dataset should have both a structured export and a human-readable form.

Inventory and structured data

Retain the native database backup or application export, a spreadsheet such as XLSX or ODS, a simple structured export such as CSV, and a human-readable PDF report.

Documents

Use PDF for convenient final reference, while retaining editable source files where future revision may matter. Keep high-quality scans for critical certificates, invoices and reports.

Photographs

Retain high-resolution originals. JPEG is practical for ordinary access, TIFF for high-quality preservation scans, PNG for screenshots and diagrams, and original camera files where their metadata or image information matters.

Email

Important correspondence should not remain only inside a live mailbox. Preserve a readable PDF, an EML or equivalent export where message metadata matters, and attachments in their original formats.

Web listings and online evidence

A bookmark is not an archive. Save important pages as PDF, screenshots, downloaded images and copied descriptive text, together with the URL and the date accessed.

Database-specific preservation package

A database may contain relationships that a PDF cannot reproduce: multiple valuations, linked components, controlled vocabularies, image paths and separate document stores. Preserve the native backup, full data exports, a field or data dictionary, human-readable reports, linked media folders, the software name and version, and instructions for reconstructing links.

For a custom-built collection system, also preserve the database schema, configuration information, deployment notes and source code where appropriate - but always include a non-technical export. Executors should not have to rebuild an abandoned application before they can identify the collection.

Chapter 7

Make the archive understandable without the collector's memory

Stable identifiers, consistent file names and a simple folder structure do more than create tidiness. They preserve relationships when links break, software changes or files are copied outside the original system.

File-naming judgement

Include the stable collection identifier, a meaningful record type and an unambiguous date where relevant.

COLL-00482_1985-TSR-Module_B1_Front_2026-07-15.jpg

COLL-00482_Auction-Invoice_2021-10-22.pdf

COLL-00482_Condition-Report_v03_2026-07-15.pdf

Version judgement

Distinguish current, master, prior, working, duplicate and obsolete records. Avoid names such as final-new-2 or latest-copy that conceal sequence and authority.

Earlier valuations, photographs and attribution opinions may remain historically important. Mark them as superseded, corrected, withdrawn or disputed rather than silently deleting the record of change.

A simple estate archive structure

Collection Estate Archive
├── 00_READ_ME
├── 01_MASTER_INVENTORY
├── 02_ITEM_RECORDS
│   ├── COLL-00001
│   │   ├── Photographs
│   │   ├── Acquisition
│   │   ├── Provenance
│   │   ├── Condition
│   │   ├── Valuation
│   │   └── Correspondence
├── 03_INSURANCE
├── 04_STORAGE_LOCATIONS
├── 05_CONTACTS
├── 06_ESTATE_INSTRUCTIONS
├── 07_SOFTWARE_EXPORTS
└── 08_BACKUP_AND_SYSTEM_INFORMATION

The structure need not be elaborate. Consistency, stable identifiers and a clear read-me are more valuable than complexity that only the collector understands.

Chapter 8

Preserve metadata, integrity and evidential context

Metadata may record creation date, author, photographer, camera details, copyright, file format, version, source and relationships to other records. It can be stripped by messaging services, screenshots, simplified exports or print-and-rescan workflows. Important facts should therefore also appear in the inventory rather than existing only inside technical file properties.

Metadata risk

A file may remain visible while losing the information that explains who created it, when, from what source and for which object.

Checksum value

Checksums can reveal corruption, incomplete copying or later alteration. They help show whether a file changed; they do not prove that its original contents were true.

Authenticity judgement

Evidential confidence comes from source, context, consistency, custody, metadata and preservation history. A backup protects availability, not truthfulness.

Chapter 9

Cloud services introduce succession dependencies

Cloud platforms can improve resilience and access, but they also create dependencies upon account ownership, payment, email control, two-factor authentication, provider survival and export quality. The estate needs a register of what each service contains and what happens when the collector can no longer maintain it.

Questions the system register must answer

  • Which service contains the records, and who owns the account?
  • Which email address, payment method and second factor control access?
  • What happens if payment stops or the account becomes inactive?
  • Can the full dataset, images, documents and relationships be exported?
  • Where are recovery codes and emergency-access instructions held?
  • Does the provider offer a legacy-contact or deceased-user process?

Export before trust

A platform export should be inspected before it is relied upon. Some exports contain raw tables only, omit images, use unexplained internal identifiers or fail to preserve links visible inside the application.

Cards may be cancelled, bank accounts frozen, email accounts lost and subscriptions allowed to lapse after death. The executor guidance should identify services that must remain active temporarily and material that should be exported immediately.

Chapter 10

Balance encryption with lawful executor access

An unencrypted archive may expose values, addresses, signatures, purchase history, correspondence, financial details and security arrangements. An encrypted archive may be effectively destroyed if the recovery key dies with the collector. Estate planning must solve both problems at once.

Chapter 11

Devices and media must also be discoverable

The executor cannot recover an archive that nobody can locate. Record the existence and location of computers, laptops, phones, tablets, external drives, USB devices, memory cards, network storage, hardware security keys and printed recovery information.

Label physical media with purpose, last-update date, encryption status and whether it is a working, backup or archive copy. Do not attach the decryption key to the drive. Replace vague statements such as "everything is on the computer" with a precise device and location description.

Media do not preserve themselves

Hard drives, solid-state storage, optical discs, connectors, chargers, file systems and encryption software all fail or become obsolete. Migration is an active process: copy to current media, verify completeness, open representative files, check metadata and folder relationships, and keep the old medium until the replacement is proven.

For a personal collection, a roughly five-year media review is a useful prompt rather than a guarantee. Review earlier when hardware becomes unreliable, interfaces disappear or the archive becomes materially more important.

Chapter 12

Test recovery, not merely backup completion

Many collectors trust backup software they have never used to restore anything. A successful backup notification proves only that a process reported success. A recovery test proves whether the expected material can be retrieved and understood.

A meaningful recovery test confirms that:

  • the expected folders and recent changes are present
  • inventory exports open and remain readable
  • representative photographs are not corrupted
  • encrypted archives can be unlocked using the documented route
  • passwords, recovery keys or emergency-access steps still work
  • relationships between identifiers, files and objects remain understandable
  • a sample restoration succeeds on a different computer
  • the person expected to use the system can follow the instructions

Chapter 13

Prepare an executor's digital collection pack

The executor should be able to begin safely without first understanding the collector's entire technical environment. The pack is an orientation and action tool, not a complete duplication of every record.

Read-me and authority

  • Explain what the archive is, when it was last updated and which inventory is authoritative.
  • Describe the folder structure and the meaning of identifiers.
  • Name the person who can help interpret the collection or technical system.

Inventory and priorities

  • Provide inventory copies as PDF, spreadsheet and structured export.
  • Identify high-value, fragile, easily misidentified or externally held objects.
  • Flag groups, sets or archives that must not be separated.

Location and systems

  • Map object identifiers to property, room, cabinet, shelf, container or custodian.
  • List software, online platforms, controlling accounts, renewal status and export method.
  • State where lawful access instructions and recovery information are held.

Backups and recovery

  • List each copy, what it contains, where it is held and whether it is encrypted.
  • Record the last successful backup and the last successful recovery test.
  • Explain which copy should be used first and which should remain untouched as evidence.

Contacts and first actions

  • Include relevant valuer, insurer, conservator, dealer, auction house, society, solicitor and technical helper.
  • Set out immediate priorities: secure objects, preserve subscriptions, export cloud systems and avoid publishing locations.
  • Warn against discarding packaging, certificates, components or apparently duplicate material.

Chapter 14

Choose a review and snapshot rhythm

Frequency should reflect how quickly records change and how much work, evidence or estate clarity could be lost. The more active the collection, the shorter the interval between recoverable copies. Stable estate snapshots can be less frequent, but they should be recreated after major changes.

RhythmSuitable use
Continuous or dailyActive inventory, new photographs, current acquisitions, documents being edited
WeeklyOrdinary working folders, research notes, correspondence exports, moderate collection activity
Monthly or quarterlyStable off-site snapshots, full media copies, estate-access exports, integrity reviews
AnnuallyFormal review of inventory, access, contacts, formats, services, recovery and estate instructions
Immediately after changeMajor acquisition or sale, relocation, valuation, reorganisation, restoration or estate-plan change

Chapter 15

Recognise the failure patterns that create false confidence

Most catastrophic documentation failures do not begin with no system at all. They begin with a plausible arrangement that was never examined from the executor's perspective.

"It is all in the cloud"

The executor may not know which service, which account controls it, how it is paid for, whether it is synchronised or backed up, or how the content can be exported.

"My family knows my password"

They may remember it incorrectly, lose the second-factor device, lack recovery codes or be uncertain whether and how they are authorised to use the account.

"The external drive is the backup"

It may be the only copy, permanently connected, years out of date, encrypted without a recoverable key or stored beside the computer it is meant to protect.

"The collection app contains everything"

The subscription may lapse, the provider may close, or the export may omit photographs, documents, relationships and information visible only inside the application.

"I printed the inventory"

A printout is useful for immediate orientation, but it cannot preserve full-resolution photographs, searchable metadata, attachments, earlier versions or database relationships.

"Automatic backup means it is safe"

A backup process is not trustworthy until representative files have been restored, opened and understood on a separate system.

Chapter 16

Minimum viable and enhanced arrangements

Proportionate estate planning matters. A modest collection does not require institutional digital-preservation machinery, but every collection needs a minimum route from object to record and from failure to recovery.

Minimum viable arrangement

Prevent the common catastrophic failures

  • A current inventory with stable object identifiers
  • Clear photographs linked to the correct records
  • Copies of essential ownership, condition and valuation documents
  • Inventory exports as PDF and spreadsheet or CSV
  • One local backup and one off-site backup
  • A written record of where copies and access instructions are held
  • An executor-access method and an annual recovery test

Enhanced arrangement

For high-value or research-significant archives

  • Professionally designed exports and data dictionaries
  • Controlled metadata and preservation masters
  • Checksums, audit trails and read-only snapshots
  • Secure versioned cloud backup plus offline copies
  • Formal migration and digital-preservation procedures
  • Independent copies held by an authorised professional or archive
  • A written succession plan for the catalogue or research archive itself

Specialist threshold

Seek specialist help when the archive itself has material value or complexity

Professional digital-preservation, cybersecurity, database or legal advice becomes proportionate where the archive supports very high values, contains sensitive personal or security data, depends upon custom software, includes institutional research, uses complex encryption, has already suffered corruption, or may be transferred to a museum, library or archive.

The threshold is not technical sophistication for its own sake. It is the point at which an error in access, migration, authenticity or confidentiality could cause serious financial, legal, historical or personal harm.

Chapter 17

Carry out an annual digital estate review

The review should be capable of finding both technical failure and documentary drift. A perfectly functioning backup of an outdated inventory is not an estate-ready archive.

Inventory

  • Are all material objects recorded?
  • Are disposed, gifted or sold items marked correctly?
  • Do unidentified or unlinked items remain?

Files and formats

  • Do key files still open in current software?
  • Are important photographs and documents linked to the correct records?
  • Are proprietary or obsolete formats creating a dependency?

Backups

  • Did automated backups run as expected?
  • Is an offline, immutable or otherwise protected copy current?
  • Has a representative recovery test succeeded on another computer?

Access and services

  • Can the nominated person locate the instructions?
  • Are password-manager, emergency-access and recovery-code arrangements current?
  • Can every important service still be exported, and which subscriptions must remain active?

Estate meaning and security

  • Are the most important objects and specialist contacts still correctly identified?
  • Do beneficiary and disposal instructions reflect current intentions?
  • Are confidential, financial and security records separated from general collection information?

Key takeaways

  • A collection's digital record is part of its practical and evidential infrastructure.
  • Synchronisation, backup and archive solve different problems; an estate-ready system usually needs all three.
  • Keep preservation masters, working copies and simplified estate-access copies as distinct layers.
  • Never let one device, cloud account, proprietary application or password become the only route to the collection's meaning.
  • Use stable identifiers to connect physical objects, photographs, documents, locations and instructions.
  • Test restoration on another computer and record the result.
  • Balance encryption and confidentiality with a lawful, documented executor-access process.
  • Review the archive after major changes and at least annually for access, formats, services, recovery and documentary accuracy.

Continue learning

Related topics