The question usually comes up after something already happened. A break-in, a slip-and-fall claim, a disputed transaction, and someone goes to pull the footage only to find the system overwrote it days ago. How long a business keeps security camera footage is a decision most facilities never make on purpose. It gets set once at installation, then nobody touches it again until it matters.
Most Colorado businesses should keep footage for 30 to 90 days
For a commercial facility with no industry-specific requirement, 30 to 90 days of retention covers most situations, and 60 days is a sound default. That window is long enough to catch incidents that surface weeks after they happen and short enough to keep storage costs reasonable.
The right number depends on whether a regulation sets a floor, how long it typically takes your business to discover an incident, and how much storage your system can hold. A retail store that finds shrinkage on a monthly inventory count needs more runway than a warehouse that reviews footage the same day. Set the period to the slowest realistic discovery time, not the fastest.
Colorado's regulated industries have specific footage retention rules
Some Colorado businesses don't choose their retention period. State rules set it for them.
Licensed marijuana businesses are the clearest case. Colorado's Marijuana Enforcement Division requires surveillance recordings to be kept for a minimum of 40 days, in a format that can be authenticated and accessed on demand. The security plan filed with the state has to document how the business meets that retention, and footage can't be destroyed if the licensee knows of a pending investigation.
Businesses that store or process payment card data follow a different standard. PCI DSS calls for at least three months of footage covering sensitive areas such as server rooms and data storage, not public checkout lanes. Where cameras aren't used in those areas, access control logs can stand in for camera footage.
Healthcare facilities, financial institutions, and government clients often carry their own retention obligations through internal compliance policy, records-retention rules, or contract terms rather than a single video-specific statute. If your facility falls under any of these, confirm the exact requirement with your compliance or legal team before setting the system. A regulator's retention floor is a minimum, not a target.
What determines how much footage your system can hold
Storage is the constraint, and it gets decided at installation. The number of cameras, their resolution, the frame rate, and the compression standard together set how many days a system retains.
A single 4K camera recording continuously produces far more data than a 1080p camera, and a 64-camera system running at 4K can burn through its storage in under two weeks if it wasn't sized for retention. Compression changes the math. Cameras using H.265 encoding cut storage demand roughly in half compared to older H.264 hardware, which is one reason retention targets that were impractical five years ago are routine now. Motion-based recording stretches retention further by not capturing empty hallways at full frame rate around the clock.
The problem we see most often is a system specified for camera coverage with no retention target in mind. The cameras go in, the recorder holds whatever it holds, and nobody learns it only keeps 11 days until they need day 12.
How retention plays out for facilities across Colorado
Different facility types land on different retention needs. A manufacturing plant in the Fort Collins corridor reviewing footage for safety incidents and equipment damage usually wants 60 to 90 days, because workers' comp claims and OSHA questions don't always surface right away. Municipal and government facilities in both Northern and Southern Colorado often need longer retention tied to records policies and open-records considerations. A defense-adjacent commercial site near Colorado Springs may carry contractual retention requirements that exceed anything a state rule sets.
We are an authorized Axis and Avigilon integrator and work with video management platforms including Genetec, Milestone, and Hanwha. We install and support commercial video surveillance systems across both regions, and we size storage to the retention period a facility needs rather than the other way around. For a fuller picture of choosing a commercial camera system, see our guides for Fort Collins and Colorado Springs businesses.
How to set a retention period you can defend
Start with any regulatory floor that applies to your business, then set a business minimum above it. For most commercial facilities with no regulation in play, that minimum lands at 60 days.
Write the retention period down as a policy, not a setting buried in the recorder. A documented policy matters when an attorney, an insurer, or an auditor asks why footage from a specific date does or doesn't exist. Configure the system to overwrite on a fixed schedule that matches the policy, and protect the recorder against tampering so footage can't be deleted early. If your business gets notice of litigation or an investigation, the relevant footage has to be preserved past its normal overwrite date, so your team needs a way to flag and export clips before the system reclaims them.
Then test it. Pull footage from the oldest date the system should hold and confirm it's there. A retention policy nobody has checked is a guess.
Frequently asked questions
How long does Colorado law require businesses to keep security camera footage?
Colorado has no general law requiring commercial businesses to keep security camera footage for a set period, so most businesses choose their own window, commonly 30 to 90 days. Specific industries are regulated. Licensed marijuana businesses must keep surveillance recordings for at least 40 days under state Marijuana Enforcement Division rules, and businesses handling payment card data follow PCI DSS, which calls for at least three months of footage covering sensitive areas. Confirm your own requirements with a compliance or legal advisor.
Is it a problem to keep footage longer than 90 days?
For most commercial businesses, keeping footage longer is legal, but it has tradeoffs. Longer retention means more storage cost and more recorded data that could be subject to a subpoena or a discovery request. Privacy practice generally expects a business to keep footage only as long as there's a reason to. For a facility with no regulatory requirement, a defined period in the 30 to 90 day range, applied consistently, is easier to defend than keeping everything indefinitely.
How much storage do I need to keep 60 days of footage?
It depends on camera count, resolution, frame rate, and compression. As a rough example, one 1080p camera recording continuously at 30fps for 60 days needs on the order of 2 to 3 terabytes, and a 4K camera needs several times that. A 32-camera system sized for 60 days of 4K retention can require tens of terabytes. Motion-based recording and H.265 compression bring those numbers down. Set the retention period first, then size storage to meet it.
Can ESI change the retention period on a system we already have?
In most cases, yes. Retention depends on how much storage the recorder has relative to the camera load, so extending it may mean reconfiguring recording settings, adding storage, or adjusting which cameras record on motion versus continuously. We can assess an existing system in Northern or Southern Colorado and tell you what retention it currently holds and what it would take to reach your target.
Find out how many days your system actually holds
If you don't know how many days of footage your system holds right now, find out before an incident forces the question. We can review your current surveillance setup across Fort Collins, Colorado Springs, and the surrounding markets, confirm its retention, and design storage around the period your facility needs. Call (970) 999-1681 or Get a Free Site Walk to schedule a site assessment.