Every working artist eventually has to share unreleased music with people they don't fully trust. A&R at a label you're pitching. A collaborator you're working with for the first time. A music blogger whose coverage you want before a release. A producer you're auditioning. A sync licensing company evaluating your catalog.
Sharing the music is a necessary professional act. Sharing it without protection is a gamble that most artists lose at least once. Here is how watermarking works, why it matters, and the practical protocol for protecting unreleased tracks.
Why Demos Leak
Demos leak for three reasons: intentional distribution, carelessness, and platform security failures. Most artists assume leaks are malicious. Many of them aren't.
A collaborator plays the track in a studio session and someone records it on their phone. A producer sends it to a session musician for reference and that person sends it to a friend. An A&R passes it internally within a label and it ends up in someone's folder without proper access controls. A journalist who received an early stream share plays it at volume during a call.
The result is the same regardless of intent: your unreleased music is circulating without your authorization, and without watermarking, you have no way to trace who sent it where.
What Audio Watermarking Does
Audio watermarking embeds identifying information — typically tied to the specific recipient of each file — in the audio signal in a way that is inaudible during playback but detectable by software analysis.
When you send a watermarked file to a specific person, that file carries a unique identifier. If the file leaks and ends up online, you can run analysis on the leaked audio and trace it back to the specific download that was shared publicly. You know who had the file. You know which copy leaked.
This doesn't prevent leaks. Nothing prevents leaks completely. Watermarking changes what happens after a leak: instead of having no information about the source, you have a specific, traceable chain. That chain matters practically — if you're in a negotiation with a label or a sync licensing company and an unreleased track leaks from a demo you shared with them, having trace evidence of the source changes the conversation.
Track Vault
BCKSTG's Track Vault is built specifically for this problem. The workflow:
1. Upload the track. Upload your unreleased file to Track Vault. The audio is stored securely and not publicly accessible.
2. Generate a unique share link per recipient. For each person who needs access to the track, generate a separate share link. Each link is tied to a specific recipient identifier.
3. Set access controls. Choose whether the recipient can download the file or only stream it (listen-only links prevent the file from leaving the recipient's device). Set an expiration date on the link.
4. Send each recipient their individual link. Never send the same link to multiple people — doing so eliminates the traceability.
5. Leak Trace. If a file appears online, the Leak Trace feature identifies which download was the source by analyzing the watermark embedded in the leaked audio. You get a specific identification, not an investigation.
Track Vault vs Other File Sharing Tools
Most artists use Google Drive, Dropbox, or WeTransfer for sharing demos. Here's what those tools don't do:
| Tool | Audio watermarking | Per-recipient links | Listen-only mode | Leak tracing |
|---|---|---|---|---|
| Google Drive | No | No — shared links are reusable | No | No |
| Dropbox | No | No | No | No |
| WeTransfer | No | No | No | No |
| Track Vault | Yes | Yes | Yes | Yes |
Google Drive and Dropbox provide access control (you can restrict who can view a file), but they don't embed identifying information in the audio itself. If a recipient downloads a file from your Google Drive and shares it, you can't determine from the audio which download was the source.
Copyright Registration: Do This First
Watermarking provides evidence of source, not legal protection. Before sharing any unreleased music, register the copyright.
In the United States, copyright registration is handled through the U.S. Copyright Office's eCO system at approximately $65 per work for a single registration, or less per work for a group registration. Registration is not required for copyright to exist — your music is copyrighted the moment it's fixed in a recording — but registration is required before you can sue for infringement and collect statutory damages.
The practical sequence: register first, share second. A watermark tells you who leaked. Registration tells you what legal recourse you have when something happens as a result.
For music registered in Mexico, the relevant body is the Instituto Nacional del Derecho de Autor (INDAUTOR). For Puerto Rico, U.S. copyright law applies.
What to Do After a Leak
1. Document the leak. Screenshot the URL where the audio appears. Note the date and time. Don't delete the evidence.
2. Run Leak Trace. If the leak came from a Track Vault share, use the Leak Trace feature to identify the source download.
3. Send a takedown notice. If the audio is on a platform (YouTube, SoundCloud, a streaming service), file a DMCA takedown through the platform's copyright reporting system. Most platforms have this process automated — it takes under ten minutes.
4. Contact an attorney if the situation escalates. If the leak is on a major platform driving streams, if it involves a label or sync company dispute, or if the leak caused financial damage, the watermark trace and your copyright registration are the evidence you hand to legal counsel.
5. Evaluate the sharing protocol. If a track leaked from your Track Vault, you know which download was the source. Decide how to handle that relationship. If a track leaked despite watermarking from a different method, reconsider your sharing workflow.
Practical Protocol Before Every Share
- Register the copyright (copyright.gov/registration for US)
- Upload to Track Vault
- Generate a unique link for each specific recipient — never the same link to multiple people
- Set listen-only access where possible (A&R evaluations, press previews, producer auditions)
- Set an expiration date — a link active for six months has been in more hands than you know
- Log who received which link and when
The protocol takes five minutes per track. The leak conversation takes much longer.
The Sharing Situations That Carry the Most Risk
Not every share carries equal risk. Here are the situations where unprotected sharing most often results in leaks, and what the correct protocol looks like for each:
A&R at a major label. High-risk because major label employees interact with many artists and sometimes pass tracks internally without realizing the implications. Always use a listen-only, watermarked link with a 30-day expiration. Never send a download link in a first-contact situation.
Producers and collaborators. Medium-to-high risk depending on the producer's working practices. Producers often share reference tracks in session with other artists. Use Track Vault with listen-only access for initial evaluation; if the collaboration is confirmed, provide a downloadable link with their specific identifier.
Sync licensing companies. High-risk because sync teams evaluate large volumes of tracks and share them internally across music supervisors, directors, and ad agency contacts. Always watermark. Always send a listen-only link unless they've explicitly requested a download for sync consideration.
Bloggers and press contacts. Lower risk but present. Journalists are generally professional about embargo discipline. The main risk is sharing embargoed tracks on personal devices where they can be inadvertently distributed. Use listen-only links with expiration dates for pre-release listening copies.
Contest or submission platforms. Varies by platform. Read the terms of service before submitting unreleased music to any submission platform — some terms include broad licensing language that affects your rights to the material.
How to Vet a Collaborator Before Sharing
The leaks that hurt most rarely come from strangers — they come from people you decided to trust with the file because the working relationship looked legitimate. Before sending an unreleased track to a new producer, session musician, sync agent, or label A&R, run a basic vetting pass. This takes ten minutes and prevents the most common source of preventable leaks.
Confirm they exist where they say they exist. A producer who claims credits on specific records should be findable on Tidal credits, AllMusic, or the liner notes of those records. A label A&R should have a verifiable email at the label's actual domain (not a generic Gmail account) and a LinkedIn presence consistent with their stated role. A sync company should have placements you can verify on IMDb or by searching the title plus the company name.
Ask how they handle pre-release material from other artists. A legitimate professional answers this question without hesitation — they'll describe their own workflow for receiving and storing unreleased files, which collaborators they share with internally, and what their NDA practice looks like. Vague answers ("we're careful with this stuff") are the signal that there is no actual workflow.
Request a written NDA for anything sensitive. Not a bespoke legal document — a one-page mutual non-disclosure naming the specific track, the intended use, and a non-circumvention clause prohibiting forwarding without written consent. Templates exist on Rocket Lawyer and similar services for under $40. The signing itself is the screen — collaborators who refuse to sign an NDA for an unreleased commercial recording are telling you what to expect.
Start with a listen-only, time-limited Track Vault link. Even after the vetting checks out, the first share is listen-only with a 14-day expiration. If the working relationship progresses to active collaboration, you can issue a downloadable link tied to that specific recipient. The download privilege is earned, not granted by default.
Check their internal sharing claims against reality. When a sync agent says "I only share with three music supervisors I've worked with for years," ask which three. When an A&R says "the team will review this internally," ask how many people are on the team. The specificity of the answer correlates with the actual handling discipline.
The vetting step is the one most artists skip because it feels paranoid. The leak conversation feels worse.
Frequently Asked Questions
Does watermarking affect audio quality?
No. Forensic audio watermarking operates below the threshold of audible perception — it does not change the sound quality of the track in any way that a listener can detect. The watermark is detectable by software analysis, not by ear.
Can someone remove a watermark from a track?
Sophisticated audio processing can theoretically degrade a watermark, but this requires specific tools, technical knowledge, and deliberate effort. Casual sharing — which is how most leaks happen — doesn't affect the watermark. For the purposes of the typical music industry sharing situation, the watermark is durable.
Should I send listen-only or downloadable links to A&R?
Start with listen-only for initial evaluations. If an A&R is genuinely interested and needs to present the track internally or share it with a decision-maker who will make a deal offer, provide a downloadable link at that stage — but generate a new unique link for that specific recipient rather than sharing the original. Track every download.
Does Track Vault work for sharing music internationally?
Yes. Track Vault links work the same way regardless of where the recipient is located. The watermark and Leak Trace function are built into the share system, not dependent on geography.