Open, and taking cases in · 9am–5:30pm, weekdays In a hurry? Call 0800 6890668
CDR Cardiff Data Recovery 0800 6890668 Book it in
CDR / Evidence and investigations / Video off CCTV and DVR disks

Evidence work · disks out of DVR, NVR and CCTV units

CCTV and DVR recovery, Cardiff. Switch the recorder off first.

A recorder writes until the disk is full, then loops back to the beginning and paints over what it laid down first. Age is its only rule; it cannot tell your break-in from an empty forecourt at 3am. Pull the power and the loop halts there. From then on the work is done on a bench, from a copy.

If we get nothing, you pay nothing Handled as an exhibit The loop is overwriting it now

Speak to us in confidence
0800 6890668

The names on most of these lids.

Hikvision · HiLookNo other make reaches us this often. Near the start of the disk there is a HIKVISION signature, and a B-tree index sits behind that; read the pair and each clip returns with its label intact.
DahuaThe second make we handle in numbers, arranged differently again: DHFS tables, with video held in .dav files. Whatever is intact we parse; whatever is not we carve.
Swann · Reolink · Annke · UniviewMany badges, far fewer chipsets underneath them. Once the disk is out of the housing the layout is ground we have covered before, and whose name is on the front stops counting for much.
No-name grey boxesPut in years back by a firm that has since closed, with no manual and no number to ring. None of that matters on the bench — the disk inside still writes video in blocks, and blocks can be read.

What you see, and what to do.

Yours not here? Ring us →
What shows upWhat has gone wrongDo this now
Somebody deleted the recordings by handThe index entry went; the frames did notCut the power right now
An installer reformatted the recorder's diskA blank index written on top of the footageWe sweep the disk for frames
Dead — no lights, no pictureThe footage sits on the disk, not the boardWe lift the disk out and image it
The incident was two weeks ago nowThe loop might have passed over it already — we will checkThe free look gives the answer
Plays on screen, will not exportA failed USB socket, or buggy export firmwareWe export off the image instead, which works
An insurer, or the police, wants to view itExhibit pack: native clips, MP4, hash values, reportSay so when you book it in
Posting it to us: post it fully insured and tracked to the intake lab; the carriage home is on us. If you would rather run the packing past someone first, ring before it goes. Every step is set out on the posting guide.

How it goes, step by step.

The whole casebook →
01

A case number, and a diagnosis at no cost Free

The diagnosis costs you nothing. Every item that arrives is logged under a case number of its own, and an engineer works out what has actually failed — then tells you plainly which files can come back and which cannot. The price follows that: one fixed figure, in writing, and no work begins until you have read it and said go ahead.

Diagnosis at no chargeOne fixed figure in writingNothing owed yet
02

Off at the socket

Every call about footage starts the same way. Take the plug out of the wall, or lift the disk out of the recorder. Nothing that follows counts for as much, because a running box is quietly writing over the thing you need.

Power taken off firstLoop halted
03

A read-only image

The disk comes out and goes behind a write blocker, so our imager can read every sector and send nothing back. Once that copy exists the recorder is out of the story, and the rest of the job is done on the image.

Imaged behind a blockerDead recorder, no obstacle
04

Index first; frames after that

Hikvision lays down a HIKBTREE index; Dahua keeps DHFS tables of its own design. Where those structures still read, each clip returns labelled with its camera and the hour it was shot. If they are gone, the image is swept for video frames — H.264, H.265 — and rebuilt into files that play.

Native tables parsed firstIf not, frames are carved
05

You approve it, then it goes back

Nothing is billed while you are still deciding. A complete listing of what came off the drive reaches you first, and the invoice only follows your yes. Files travel back on media bought new for the job, return postage ours, and we do not close it here until every one of them opens on the machine you will use.

The file list is yours to approveBack on media bought newThe postage back is on us

Notes from the workbench

  • A recorder disk carries no ordinary filesystem — each maker uses a block layout of its own, which is why Windows finds nothing it knows, asks to format the disk, and off-the-shelf undelete tools return an empty list.
  • The index holds the labels, the disk holds the pictures — with the index intact every clip lands tagged by camera and by time; without it the video still comes back, but nothing tells you which lens or which hour.
  • The loop plays no favourites — the block that has sat there longest is the next one used, whether it holds a deserted yard at 4am or the ninety seconds that matter.
  • Take the installer's retention figure and halve it — add cameras, push the resolution up or move to continuous recording and a month of history shrinks to under a week.

About that thirty-day rule: there is no UK law setting a minimum period for keeping CCTV. The 31 days people repeat is really the storage-limitation principle out of data-protection law, which is about purpose, not about how much a disk holds. Your real retention is decided by camera count, bitrate and disk size. Assume the lower number.

Straight out of the casebook.

CF · CDF-2026-0546LOGGED ✓

Nine days of looping after a Cardiff shop break-in

The insurer came looking for the video nine days on, and in all that time nobody had switched the recorder off. We imaged the disk, unpicked the index, and recovered the minutes that mattered from blocks the loop had not reached yet. Two copies went out: one to view, one to go with the claim.

The break-in window recovered3 days after arrival

Before you send it off.

Start with these

  • Take the recorder off power
  • List the cameras and the exact times you need
  • Send the disk by itself; leave the recorder where it is
  • Say who will receive the copy — you, an insurer, the police

What to avoid

  • Letting the recorder run on while you decide
  • Deleting older footage to make space
  • A firmware update, or a reset to factory
  • Retrying an export button that keeps failing

The things people ask on the phone.

Can CCTV footage be recovered after deletion?

Usually, yes — as long as the box was stopped before the loop worked back round to that part of the disk. Deleting a clip only drops it from the index; the frames sit where they were until newer video is laid over the top.

If new video has already covered it, is it gone?

It is. When fresh frames land on the same blocks, the earlier picture stops existing, and no lab anywhere can bring it back. That is why we ask you to pull the plug before anything else.

The box will not power up. Is the video lost?

Seldom. Strip a recorder back and it is a metal case wrapped around a hard drive; the video sits on that disk, not on the electronics. The disk comes out, gets copied, and the job runs on the copy.

How long have we got?

That comes down to disk size, camera count and the bitrate each one records at. A busy yard can come full circle in a few days. While the recorder is powered up, treat the clock as running.

That recorder is still writing over it.

While that recorder keeps writing, the clip you need is being covered over — and your deadline has not moved. Book it in. The first look is free, and it stays private.

0800 6890668