How to Keep an Incident Log (Audio + Written)
This guide was reviewed to keep incident logging factual, organized, and privacy-conscious, with conservative evidence-handling language.
Uses 4 external sources from platform documentation and official support references.
On this page
- Why a written log is so valuable
- What to capture in each entry
- Combine written notes with other evidence
- Keep it factual, not emotional
- Store it securely and back it up
- Don't rely on the log (or the app) alone
- Incident log template
- When to record audio
- How to organize files
- Preserve originals
- Review routine
- What makes a log credible
- Audio retention for incident logs
- The bottom line
Whatever you're dealing with — harassment, a dispute, a pattern of behaviour you may need to report — a clear, dated incident log is the single most reliable record you can keep. It's low-risk, it's credible, and it gives context to any other evidence. Here's how to keep one well.
Important: This is general information, not legal advice. BlackBox is a personal recording tool, not a safety or legal-evidence service, and you should never rely on it as your only record or protection. Recording people without the consent your area requires can be illegal — keep that in mind before adding audio. If you're in danger, contact emergency services, and consult a qualified professional for your situation.
Why a written log is so valuable
- Low legal risk. Writing down what happened to you doesn't require anyone's consent, unlike recording them.
- Credible. A contemporaneous, consistent, factual record carries real weight.
- Context. It explains the who/what/when/where that a lone audio clip can't.
- Reliable. It won't be excluded for how it was captured.
What to capture in each entry
Keep it factual and specific. For every incident, note:
| Field | What to write |
|---|---|
| Date & time | When it happened (as precisely as you can) |
| What happened | Plain, neutral description; quote exact words where possible |
| Where | Location, or the platform/app if online |
| Who | The person involved, plus anyone who witnessed it |
| Impact | How it affected you (missed work, distress, etc.) |
| Action taken | Did you report it? To whom? Any response? |
Write entries as soon as you safely can, while details are fresh — contemporaneous notes are far more credible than ones written months later.
Combine written notes with other evidence
A log is strongest when it ties everything together:
- Messages and emails — reference them in the log and keep copies.
- Screenshots with visible dates.
- Audio, where lawful — note in the log that a recording exists, with its date. See can audio recordings be used as evidence? before relying on any recording.
If you do keep audio, keep the original unedited and let your written log supply the context — this avoids the mistakes that ruin audio evidence.
Keep it factual, not emotional
It's natural to feel angry or upset — but a log reads as more credible when it sticks to facts: what was said and done, observably. Record your emotional impact in the "impact" field rather than editorialising the events themselves.
Store it securely and back it up
A record is only useful if it survives and stays private:
- Keep it on a device and account the other person can't access — ideally not a shared or work device.
- For any audio, keep it on-device and locked — BlackBox stores recordings locally with no upload and a Face ID lock; see the privacy policy.
- Back up to storage you control, so a lost or confiscated device doesn't erase everything.
Don't rely on the log (or the app) alone
A log supports a process — it isn't the process. Combine it with official reports and professional help:
- Report through proper channels (HR, the police, a platform, a regulator).
- Get advice from a lawyer or relevant authority.
- Use specialised support services for harassment or abuse.
BlackBox is not an emergency or legal service; it can help you keep a private, on-device record, but it can't protect you or resolve anything. Treat it as one tool among several.
Incident log template
Use the same format every time:
| Field | Example |
|---|---|
| Date/time | 2026-06-19, 8:40 PM |
| Location | Apartment hallway |
| People involved | Names or descriptions |
| What happened | Specific words/actions |
| Evidence | Audio file, photo, email, message |
| Witnesses | Names/contact if appropriate |
| Impact | Missed work, felt unsafe, property damage |
| Follow-up | Reported to landlord, HR, police, manager |
Consistency is the value. A log with ten consistent entries is easier to understand than ten scattered notes in different apps.
When to record audio
Audio can help if the incident includes spoken words, threats, instructions, agreements or noise. It is less useful for visual damage, location, physical evidence or documents. Pair audio with photos, screenshots or written notes when needed.
Before recording, consider consent law and safety. If recording could escalate the situation, prioritize leaving, getting help, or writing notes afterward.
How to organize files
Create a folder structure:
- incident log document;
- original audio;
- transcripts;
- photos/screenshots;
- reports submitted;
- responses received.
Use filenames with dates, such as "2026-06-19-hallway-noise-audio". Do not rely on memory or generic filenames like "recording-14".
Preserve originals
If a file may become evidence, keep the original unchanged. Make duplicates for trimming, sharing or transcription. Keep a short note explaining when and how the recording was made.
Do not post incident recordings publicly unless advised by a qualified professional. Public posting can create privacy, defamation or retaliation risks.
Review routine
Once a week:
- Add missing context.
- Back up important files.
- Delete unrelated audio.
- Mark unresolved incidents.
- Prepare a concise summary if you need to report.
The log should help you act, not become another pile of stress.
What makes a log credible
A credible incident log is boring in the best way: consistent dates, specific facts, original files, and clear context. Avoid exaggeration, name-calling or guessing motives. Write what happened, what was said, who saw it, and what evidence supports it. If you later need to share the log, that factual tone helps people understand it quickly.
Audio retention for incident logs
Keep audio that supports an unresolved incident. Delete routine or unrelated recordings after review. If an incident may become formal evidence, preserve the original file and make copies for transcription or sharing. This keeps the log useful without turning it into a pile of private background audio.
The bottom line
A dated, factual incident log is the most reliable, lowest-risk record you can keep — and it gives meaning to any messages or (lawful) audio you add. Keep it contemporaneous, factual, secure and backed up, and pair it with proper reporting and professional help. BlackBox can hold the audio side privately and on-device, as one part of a careful approach — never the whole of it.
Frequently asked questions
What should an incident log include?
For each entry: the date and time, exactly what happened (in factual language), where it occurred, who was present or witnessed it, how it affected you, and any action you took. Keep it contemporaneous, factual, and stored securely.
Is a written log better than a recording?
Often it's safer and more reliable. A written log carries little legal risk, while recording can be unlawful without consent. A log also gives essential context to any audio you do have. Use them together where lawful.
Sources
- Rule 901. Authenticating or Identifying EvidenceLegal Information Institute · Accessed Jun 19, 2026
- Rule 1002. Requirement of the OriginalLegal Information Institute · Accessed Jun 19, 2026
- App privacy details on the App StoreApple Developer · Accessed Jun 19, 2026
- Provide information for Google Play's Data safety sectionGoogle Play Console Help · Accessed Jun 19, 2026
Always-on, on-device and private. Free on iPhone and Android.