Local authoritative collection
The museum chooses the collection location. The private database need not live in a vendor-controlled cloud, and ordinary local collection work does not depend on an online service.
Museum-owned, recoverable, verifiable
Keep control of your collection. Recover it when something goes wrong.
MCVM brings local ownership, verified backup and restore, replacement-computer recovery, and an independent data-exit path into one buyer-facing assurance story.
Verified complete backups
Database and linked files are included and verified. Partial or failed attempts are never promoted as complete.
Clear recovery
Restore identifies museum, date, and record/media counts so staff can recognize the right collection.
The question every museum should ask a software vendor
What happens to your collection if MCVM is ever unavailable?
Your museum's records are stored in the open, widely used SQLite database format, on your own computer, alongside your photographs, documents, audio, and video as ordinary files — not sealed inside a proprietary format only MCVM can open. If MCVM were ever unavailable, a qualified technician could access that database directly with standard SQLite-compatible tools and recover the associated files. Your museum should normally rely on MCVM's own backup, restore, and recovery workflow; this independent path exists as a last resort your museum controls, not something MCVM needs to provide for you.
Long-term access
Your collection isn’t locked into MCVM.
MCVM stores collection records in the widely used SQLite database format. Photographs, documents, audio, and video are preserved alongside those records as ordinary files—not hidden inside a proprietary vendor-controlled system.
Your museum should normally use MCVM’s safeguards, workflows, and verified Complete Backups to manage and protect the collection. But if MCVM were ever unavailable, a qualified technician could access the database using standard SQLite-compatible tools and recover the associated files.
Your museum’s records remain your museum’s records.
Understand Data PortabilityProtection with honest status.
Backup health reports what was checked.
Damaged archives are not called verified.
Missed schedules stay visible.
A missed window never interrupts the next museum work session.
Changes can be protected.
Primary and Emergency Change Protection PINs are credentials a person enters before protected museum changes are made. A correct PIN shows only that a configured credential was entered; it does not identify the person or prove institutional approval.
Moves fail closed.
Relocation identifies synchronized-folder risks and preserves recovery.
Computer and service continuity
The collection outlasts a computer.
The planned institutional license belongs to the museum, not one physical PC. Replacement and dead-computer activation will not require repurchase, and temporary overlap is permitted while a restored replacement is verified.
Connected services are not the local core
Internet, Care renewal, Managed AI, and publishing services may affect those connected capabilities. They must not disable an already activated perpetual installation or block local collection access, backup, restore, or export.
Keep another copy somewhere safe.
Keep the live collection, a verified local Complete Backup, and optionally another copy in a cloud-synchronized folder or on a USB or external drive.