Signed video: what it proves, what must survive export, and what it does not replace

What the signature does

Source fact: Axis developer documentation explains that signed video adds cryptographic signatures to captured H.264 or H.265 video as Supplemental Enhancement Information, or SEI, within the codec stream. Information derived from frames is signed with a private key, and verification uses the corresponding public information carried with the signed data.

Axis ties signing to the camera’s unique identity through Axis Edge Vault. Its documentation describes the result as a way to determine whether footage has been altered after leaving the camera and to trace the footage to its originating device. Support is currently associated with devices that include Axis Edge Vault, and Axis provides product and API methods for checking whether the function exists.

The recording path matters. Axis states that the SEI frames must be preserved during both recording and export. If a VMS, transcoder, exporter, or container conversion discards them, later verification cannot use the signed-video data. Axis File Player supports H.264 and H.265 in ASF and MKV and H.264 in MP4 for the documented verification workflow.

What it does not establish

Axis product documentation distinguishes integrity verification from chain of custody. Signed video does not by itself prove who controlled the exported file, who viewed or copied it, whether collection was lawful, whether the camera clock and location were correct, or whether the scene outside the field of view contradicts the recording. Those questions require separate governance and evidence records.

Support and default enablement can vary by device, AXIS OS release, content destination, VMS, export format, and configuration. Current product documentation must be used for the deployed model rather than assuming one behavior across the estate.

DSE verification checklist

DSE recommendation: This is DSE operational synthesis, not a legal conclusion about admissibility or authenticity.

1. Verify signed-video support for the exact camera model, AXIS OS, stream, VMS, and export format.
2. Confirm the function is enabled using the supported product interface and record the configuration.
3. Capture a controlled test with documented camera identity, time source, operator, and expected scene.
4. Record through the production path, export in the intended format, and verify the result with a supported tool.
5. Confirm that SEI data survives every recorder, archive, copy, and export step used operationally.
6. Test how missing, altered, reordered, or transcoded material is reported without changing production evidence.
7. Retain hashes, access records, custody transfers, purpose, authorization, and preservation history separately.
8. Repeat the test after camera, VMS, codec, archive, or export changes.

Official references

• Signed video — signature construction, SEI preservation, formats, verification, and support discovery.
• Axis body worn solution user manual — Axis’s explicit integrity-versus-chain-of-custody distinction.
• Axis Edge Vault — device identity, signing key, origin, and video-integrity architecture.