Safety Norms: Visual Effects and Compositing

1Purpose, Scope, and Safety Principles

These norms set minimum expectations for people who create, combine, and deliver visual effects and compositing work, including students, freelance artists, studio staff, supervisors, and reviewers. The scope covers the workflow from plate ingest through delivery, along with the workstations, storage, and online channels used to share work.

Four principles guide the rest of this document. First, people come before pixels: no shot is worth an injury, a privacy breach, or an unconsented depiction of a real person. Second, mandatory rules are marked as must, while recommendations are marked as should. Third, the work must not mislead audiences about what is real. Fourth, every hazard needs a named owner and a documented response.

• Must: apply these norms to all work, including personal projects shared publicly.
• Should: adapt these norms into a project-specific safety plan before production starts.
• Note: laws, standards, and platform policies are jurisdiction-dependent and change over time; verify current versions with competent authorities, counsel, or qualified professionals.

2Roles, Competence, and Accountability

Responsibility is shared but never diffuse. The production or studio lead owns the overall safety plan and approves exceptions. The visual effects supervisor owns creative decisions, including whether a shot represents real events, real people, or real products accurately. Compositors own the integrity of their layers, file handling, and disclosure of significant alterations to their supervisor. Data managers or technical leads own storage, access control, and backups. Anyone may stop work when a norm is at risk.

Competence comes before access. Staff must complete onboarding covering workstation use, storage, licensing, and confidentiality before receiving client material. Tasks involving rigging heavy hardware, electrical work, practical effects, drones, or on-set stunts are outside compositing scope and must be handled only by qualified crews under approved procedures. Compositors should not attempt set rigging or electrical repairs.

• Must: assign a named safety lead for every project.
• Must: restrict client files to people with a documented need to know.
• Should: record each artist's software and plugin licenses before use.

3Realistic Hazards and Risk Assessment

Most compositing hazards are ergonomic, digital, or reputational rather than physical. Long sessions at a desk cause eye strain, neck and wrist strain, and fatigue that increases error rates. Workstations with high-power graphics cards, render nodes, and external drives generate heat, noise, and electrical load. Plate shoots add hazards such as trips, heights, and vehicles, which the production crew must manage before compositors ever review reference footage.

Rate risks before work starts using a simple matrix of likelihood and severity, rated low, medium, or high. A schedule with no breaks is a likely, moderate-severity risk that needs a scheduled break rule. Accidental publication of unreleased footage is unlikely but high-severity, so it needs access control and approval gates. Misleading documentary-style effects are a likely reputational risk that needs disclosure review.

• Physical: repetitive strain, eye fatigue, cable and power strain, workstation heat, and trip hazards in shared rooms.
• Information: leaks of unreleased footage, client data exposure, and insecure file transfers.
• Rights: unlicensed assets, misused likenesses, and uncleared trademarks or artwork.
• Reputational: undisclosed manipulation, false endorsements, and misattributed quotes.
• Audience: flashing or high-contrast content that may affect viewers, reviewed against recognized accessibility guidance.

4Consent, Rights, and Copyright

Any real person whose face, voice, body, or identifiable likeness appears in a shot should have documented consent for the intended use, including AI-assisted alteration or synthetic replacement. Consent should state what changes are allowed, where the work will appear, and how long it may be used. Performers, extras, and bystanders should be handled under the production release process. Minors require additional protections and guardian consent under local rules. Compositors must never create sexual, demeaning, or defamatory imagery of real people.

Copyright and licensing apply to plates, stock elements, fonts, music, logos, plugins, and third-party scripts. Use only assets whose license covers the project's use. Keep a register of licensed sources and their terms. Do not use pirated software or cracked plugins. Likeness, data protection, and synthetic media laws vary by jurisdiction; confirm requirements with counsel or the relevant authority.

• Must: obtain written consent or a valid release for identifiable real people in commercial or public work.
• Must: log every licensed asset and its permitted uses.
• Must: never use unlicensed software, plugins, or fonts.
• Should: keep reference images of trademarked products out of final deliverables unless cleared.

5Preventive Controls and Safe Working Practices

Controls work best when built into the pipeline. Use version control, naming conventions, and automated checks that flag missing plates, unlicensed files, unexpected color spaces, and missing metadata before a shot reaches review. Require a second-person check for any change that alters a real person's appearance, a location's identity, or a factual claim in the image. Keep render jobs and simulations within resource limits set by the technical lead.

Safe working also means managing the session. Save work frequently, schedule breaks, and plan large renders so they do not run on a machine needed for live client review. When a tool behaves unpredictably, stop, save, and report it rather than forcing the output. Never disable security or licensing controls to meet a deadline.

• Must: keep an approval record for each shot that changes a real person or factual scene.
• Must: store unreleased material only in approved locations.
• Should: schedule regular breaks from screen work, with intervals set by local workplace guidance.
• Should: run automated checks on every delivery package before release.

6Workspace, Equipment, and Personal Wellbeing

Set workstations so the monitor sits at or near eye level, the keyboard and mouse allow relaxed wrists, and lighting avoids glare on screens. Color-critical reference monitors should sit in a room with controlled light that does not change during review. Keep cables routed and secured, use power strips rated for the load, and do not add multiple render workstations to a circuit without an electrical assessment by a qualified electrician.

Hardware such as high-end graphics cards, storage arrays, and render systems produces heat and noise. Keep vents clear, leave space for airflow, and report overheating or burning smells immediately. Lifting heavy equipment should follow manual handling guidance from local authorities. Anyone experiencing persistent pain, eye strain, or hearing changes should consult a qualified health professional. This document does not provide medical advice.

• Must: report electrical damage, burning smells, or overheating to the facilities lead at once.
• Must: keep walkways and storage areas clear of cables and equipment.
• Should: review workstation setup during onboarding and after any move.
• Should: use ergonomic assessments where the local program provides them.

7Information, Privacy, and Platform Rules

Client footage, scripts, unreleased products, and personal data within plates carry confidentiality and privacy obligations. Store files on access-controlled storage with encryption where the platform supports it. Do not send sensitive material through personal email, consumer messaging apps, or public file-sharing links unless the project security policy approves them. Remove or blur personal data from reference images when the work does not require it, and follow the data protection rules that apply where the work is created and where it is delivered.

Truthful communication protects audiences and creators. When effects significantly change a real event, product, or person, credits, captions, or accompanying text should say so where the project requires. Promotional reels must not present effects as real capabilities if they are not. Platforms set rules on synthetic media, political content, and impersonation; check them before posting and remove content that breaches them.

• Must: disclose significant synthetic alterations to the client and to any audience the project requires.
• Must: not post unreleased client work publicly without written approval.
• Must: not present composited results as unaltered documentary evidence.
• Should: keep a publishing checklist that names the approver for each release.

8Incidents, Emergencies, and Escalation

Report incidents quickly and without blame. Incidents include injuries, electrical faults, fire alarms, lost or leaked files, unauthorized access, complaints from people depicted, takedown notices, and viewer complaints that an image misleads. Near misses, such as a file almost sent to the wrong recipient, are reportable because they reveal weak controls. Record what happened, who was involved, and what immediate action was taken in the project incident log.

In a medical or fire emergency, call local emergency services first and follow the building evacuation plan. Do not re-enter a building or handle electrical equipment during a fire or smoke event. For a suspected data breach, disconnect an affected device only if the security lead instructs it, preserve evidence, and notify the data owner. Legal notification duties depend on jurisdiction and contract, so involve counsel promptly.

• Must: report injuries and electrical faults to the safety lead the same working day.
• Must: escalate suspected leaks to the data security lead immediately.
• Should: hold a short blame-free review after each significant incident and record lessons learned.

9Records, Training, Review, and Improvement

Keep records that allow someone to reconstruct decisions: consent forms, license registers, approval logs, risk assessments, training completions, and incident reports. Retain them according to contract and local retention rules. Limit access to records containing personal data to authorized reviewers.

Review these norms at every project milestone and after any significant incident. Track leading indicators such as unapproved file transfers, missed approvals, overdue training, and recurring ergonomic complaints. Improve controls based on what the data shows, and update this document when laws, platform rules, or tools change. Verify current requirements with competent authorities or qualified professionals.

• Must: complete training on confidentiality, consent, and licensing before accessing client material.
• Should: review the project risk register at every milestone.
• Should: share lessons learned with the team in a blame-free format.

Implementation checklist

• Confirm written consent or a valid release for every identifiable real person before shots are finalized.
• Verify that every asset, plugin, and font has a license covering the project use.
• Confirm the supervisor has approved any change to a real person, location, or factual claim.
• Store unreleased material only in approved, access-controlled locations.
• Check workstation height, lighting, and cable routing before starting a session.
• Schedule breaks from screen work according to local workplace guidance.
• Run automated delivery checks for metadata, color space, and missing files.
• Review disclosure needs and platform rules before any public posting.
• Report injuries, electrical faults, leaks, and near misses the same working day.
• Log incidents and hold a blame-free review after significant events.