Local authoritative collection
The museum chooses the collection location. The private database need not live in a vendor-controlled cloud, and ordinary local collection work does not depend on an online service.
Museum-owned, recoverable, verifiable
Keep control of your collection. Recover it when something goes wrong.
MCVM brings local ownership, verified backup and restore, replacement-computer recovery, and an independent data-exit path into one buyer-facing assurance story.
Verified complete backups
Database and linked files are included and verified. Partial or failed attempts are never promoted as complete.
Clear recovery
Restore identifies museum, date, and record/media counts so staff can recognize the right collection.
Long-term access
Your collection isn’t locked into MCVM.
MCVM stores collection records in the widely used SQLite database format. Photographs, documents, audio, and video are preserved alongside those records as ordinary files—not hidden inside a proprietary vendor-controlled system.
Your museum should normally use MCVM’s safeguards, workflows, and verified Complete Backups to manage and protect the collection. But if MCVM were ever unavailable, a qualified technician could access the database using standard SQLite-compatible tools and recover the associated files.
Your museum’s records remain your museum’s records.
Understand Data PortabilityProtection with honest status.
Backup health means restore-ready.
Damaged archives are not called verified.
Missed schedules stay visible.
A missed window never interrupts the next museum work session.
Changes can be protected.
Primary and Emergency Change Protection PINs support continuity without identifying a person or proving institutional approval.
Moves fail closed.
Relocation identifies synchronized-folder risks and preserves recovery.
Computer and service continuity
The collection outlasts a computer.
The planned institutional license belongs to the museum, not one physical PC. Replacement and dead-computer activation will not require repurchase, and temporary overlap is permitted while a restored replacement is verified.
Connected services are not the local core
Internet, Care renewal, Managed AI, and publishing services may affect those connected capabilities. They must not disable an already activated perpetual installation or block local collection access, backup, restore, or export.
A practical 3-copy posture
Keep the live collection, a verified local complete backup, and another copy on a separate device or appropriate synchronized destination.