Does AI color software upload your footage?
Some AI color tools upload your footage, some upload nothing, and some send only numbers about color. What each architecture means for work under NDA, and exactly where MOVON sits.
Some AI color software uploads your footage to its servers, some processes everything on your machine, and some sends only numeric color data. The three architectures carry very different consequences for confidential work, and a tool's marketing rarely says outright which one it uses.
MOVON Match uses the third design: clips are read on your own machine, only numbers describing color reach MOVON's servers, and your footage never leaves your Mac. This post explains all three architectures, what each means for an editor under NDA, and every exception in MOVON's case, including the one image that can leave the machine and the switch that stops it.
What are the three architectures?
An AI color tool has to get your footage and its model into the same place. There are exactly three ways to do that, and every tool on the market is one of them.
| Architecture | What leaves your machine | Where the model runs | For work under NDA |
|---|---|---|---|
| Fully local | Nothing | On your hardware | Nothing to disclose; match quality and speed are capped by your machine, and models must be small enough to ship |
| Color data only (MOVON Match) | Numbers describing color; no frames, no video | On the vendor's servers | Footage never leaves the building; the vendor sees measurements, not pictures |
| Full upload | Your footage, or frames of it | On the vendor's servers | Client material sits on infrastructure you do not control; often a compliance conversation before it is a workflow |
Fully local is the cleanest privacy story and the most constrained engineering: the model has to fit and run on whatever machine the editor owns. Full upload is the easiest engineering and the heaviest disclosure: frames of an unreleased film on someone else's storage, however briefly, with your bandwidth as the bottleneck. The middle design exists because the interesting question is not where the AI runs but what crosses the wire. The reasoning behind that line, and its costs, are laid out in Local vs. cloud AI color tools.
What exactly does MOVON send to its servers?
When you run a match, the MOVON panel reads the pixels of your selected clips and your reference on your own machine, and turns them into numeric color data: statistics describing how each clip renders color. Those numbers go to MOVON's servers, the servers compute one grade per clip, and the grades come back to the panel, which applies them in Adobe Premiere Pro. Across the beta since mid-July 2026 that round trip has taken a median of 1.2 seconds per clip.
No frames from your timeline, no video, and no project files are sent. Color data describes how a clip renders color; it is not the picture and cannot be turned back into the picture. Your matches are not used to train the model. The full list of what travels, including sign-in and crash reports, is in the privacy page.
There is one exception, and it is stated here rather than in a footnote. When you save a match as a reusable Look, one small preview frame of that Look's reference is uploaded, so the Look keeps its thumbnail across your machines and after a reinstall. That is one image, only when you choose to save a Look, and you can turn it off on the Account page in the panel. Looks still work with it off; they just lose their pictures. On a locked-down project, flip the switch before you save anything.
Does picking a reference upload the file?
No, and this trips people up because the button says upload. When you choose a photo or a video from your drive as a reference, the panel sends the file's path to a companion process running on your own machine. That process opens the file locally, reads its color, and passes numbers onward, exactly as it does for timeline clips. The file itself never leaves your machine. "Upload" is the familiar word for the gesture; it is the wrong word for what happens.
How do you check what any AI tool sends?
Ask the vendor the one question that sorts every tool into the table above: does any image data from my footage leave my machine, and under what circumstances? A vendor with a clean answer will give it in a sentence. Watch for the soft spots: "processed securely in the cloud" usually means full upload, and "we may collect content you provide" in a privacy policy deserves a follow-up email before client footage touches the tool.
For MOVON the compliance-team version fits in two sentences. MOVON computes matches on its servers from numeric color data only; footage, frames, and project files never leave the editor's machine. The single exception, one preview frame per saved Look, is user-switchable off on the Account page.
Common questions
Can MOVON staff see my footage?
No. What reaches MOVON's servers is numeric color data, which is measurement, not image. The one routine exception is the saved-Look preview frame described above, which you can switch off. If you attach clips to a bug report through the Contact form, that is your choice, clip by clip, and nothing is ever uploaded automatically.
Does MOVON work offline?
The match itself needs a connection and a signed-in account, because the grades are computed server-side. Your footage does not need the connection; it never travels. Offline, the match waits until you are back online.
Why not run everything locally and avoid the question?
Because the models that read color well are large, and a model shrunk to fit inside a plugin is a weaker model and a weaker match. Server-side models with only numbers crossing the wire is the trade MOVON chose: full-size models, footage that stays home. How does AI color matching work? covers what those models actually compute.
What should I tell a client who asks where their material goes?
That the footage is read on your edit machine, that only numeric color measurements go to the vendor's servers, and that the one thumbnail exception is switched off. Send them the privacy page; the last section of it is written for exactly that conversation.
Get the next dispatch in your inbox.
Release notes, color science notes, and the occasional field report. No marketing. Unsubscribe one click.
