TL;DR
A chain of custody procedure is a documented process that records who handled an item, when each transfer occurred, where it happened, and what condition the item was in at every step. It goes well beyond a tracking number or proof of delivery. In logistics and healthcare fulfillment, a strong chain of custody procedure connects physical handoffs with digital records (barcode scans, lot data, timestamps, temperature logs, and exception documentation) to create an unbroken, auditable trail from receipt through final disposition.
What Is a Chain of Custody Procedure?
A chain of custody procedure is the formal set of steps an organization follows to create an unbroken record of an item’s custody, control, transfer, storage, handling, and disposition. NIST defines chain of custody as a process that tracks the movement of evidence through its collection, safeguarding, and analysis by documenting each person who handled it, the date and time of collection or transfer, and the purpose for each transfer.
In a logistics or fulfillment operation, “the item” might be a shipment, SKU, pallet, medical device, diagnostic kit, specimen, pharmaceutical product, return, or quarantined unit. The procedure proves that authorized people or systems maintained control at every stage and that each handoff was recorded.
Here is what a chain of custody procedure answers at every point in the process:
- What item? SKU, lot number, serial number, specimen ID, barcode, tracking number, or order ID.
- Who had control? Receiving associate, warehouse location, picker, packer, courier, carrier, lab receiver, returns team.
- When did control change? Exact date and time.
- Where was the item? Facility, bin, quarantine zone, staging lane, dock, vehicle, delivery location.
- What condition was it in? Seal integrity, packaging state, temperature status, damage, lot or expiry status.
- Why did it move? Receipt, storage, pick, shipment, transfer, return, inspection, quarantine, destruction, recall.
- What happened if something went wrong? Exception, investigation, corrective action, disposition decision.
A Quick Example
A lot-controlled diagnostic kit arrives at a 3PL warehouse. The receiving team scans the advance ship notice, verifies SKU, lot, and expiration date, checks carton condition, records a timestamp, and places the units into a controlled storage location. When an order ships, the picker scans the unit, the packer verifies it, the shipment is sealed and staged, the carrier accepts it, and delivery is confirmed with a signature. If a return comes back opened or temperature-compromised, it goes to quarantine until disposition is approved. Each of those steps is a custody event.
Why Chain of Custody Matters
It Protects Item Integrity
A chain of custody procedure helps prove that a product was not lost, swapped, opened, contaminated, diverted, or stored under unacceptable conditions. In healthcare and lab contexts, the CDC treats custody as entity-specific control: each organization handling specimens is responsible only during the period it controls them, and each receiving organization must sign off to close the prior custody chain.
It Supports Audits and Investigations
When there is a dispute, missing shipment, temperature excursion, recall, or suspected diversion, chain of custody records show the full sequence of events. For operations using electronic records, FDA 21 CFR Part 11 establishes criteria for when electronic records and signatures are considered trustworthy and equivalent to paper.
It Reduces Handoff and Pre-Analytical Risk
Laboratory research consistently shows that most testing errors happen before analysis even begins. A review in Clinical Chemistry and Laboratory Medicine found that pre-analytical factors account for 46% to 68.2% of total laboratory errors. Proper custody documentation at every handoff is one of the most direct ways to reduce that risk.
It Makes Barcode Scanning More Valuable
A CDC-funded systematic review found that all 17 included studies favored barcoding, concluding it is effective for reducing patient specimen and laboratory testing identification errors with high overall strength of evidence. Barcodes alone are not a custody procedure, but they make custody records faster, more accurate, and harder to skip.
It Keeps Regulated Inventory Controlled
For wholesale prescription drug distribution, 21 CFR Part 205 requires suitable facilities, security, appropriate temperature storage, receipt and outgoing shipment examination, quarantine for nonconforming products, and transaction records available for inspection for three years.
Chain of Custody vs. Tracking vs. Proof of Delivery
Many logistics articles blur these terms. They are not the same thing.
| Term | What it proves | What it does not prove |
|---|---|---|
| Carrier tracking | Shipment milestones (picked up, in transit, delivered) | Internal warehouse custody, handler identity, item condition, lot accuracy, seal integrity, or temperature compliance |
| Proof of delivery (ePOD) | Delivery occurred, possibly with signature, timestamp, or photo | The complete pre-delivery history |
| Inventory traceability | Where an item is recorded in inventory systems | Physical control at every handoff |
| Chain of ownership | Who legally owns the product at each stage | Who physically possessed or handled it |
| Chain of custody | Who controlled the item, when, where, under what condition, and through which transfers | Regulatory compliance by itself (the procedure must match the applicable rule, contract, or standard) |
A tracking number shows movement. Proof of delivery confirms arrival. A chain of custody record shows accountability across the entire journey. The distinction matters because, as practitioners on LinkedIn have pointed out, custody failures often occur at handoffs where no one is negligent but ownership is ambiguous. One healthcare logistics professional described the pattern clearly: night shift assumes day shift verified temperature, courier assumes the lab logged receipt, and the lab assumes transport flagged a delay.
The most important chain of custody question is not “Was there a policy?” It is “Who owns this item right now?”
What Information Should a Chain of Custody Record Include?
Each custody event should capture a minimum set of data fields. The specific requirements depend on the product and applicable regulations, but this table covers the core elements.
| Field | Why it matters |
|---|---|
| Item ID (SKU, serial, lot, specimen ID) | Proves exactly which item was handled |
| Quantity | Prevents partial-loss or substitution disputes |
| Expiration date (if applicable) | Supports FEFO and prevents expired-item distribution |
| Current custodian | Shows who or what system/location has control |
| Relinquishing party | Identifies who transferred custody |
| Receiving party | Identifies who accepted custody |
| Date and time | Creates the chronological record |
| Location | Shows where custody changed |
| Reason for transfer | Explains why the item moved |
| Condition check | Documents damage, seal state, temperature, or packaging quality |
| Seal number or tamper-evident status | Helps show whether the item was opened or altered |
| Temperature or environmental data (if applicable) | Supports cold-chain or temperature-aware workflows |
| Signature, scan, or electronic identity | Attributes the action to a person or authorized system |
| Exception flag | Captures mismatch, missed scan, damage, late handoff, or excursion |
| Corrective action or disposition | Shows how the exception was resolved |
For serialized pharmaceutical products, GS1’s pharmaceutical chain of custody guideline explains how EPCIS can be used by contracted third-party agents (including 3PLs) to capture operational product activities in serialized custody transactions.
Chain of Custody Procedure: Step by Step
This is the operational core. A chain of custody procedure for a logistics or 3PL operation typically follows these steps.
Step 1: Define Custody-Controlled Items
Not every SKU needs the same level of custody documentation. Specify which products require it: medical devices, diagnostic kits, pharmaceuticals, lot-controlled inventory, temperature-sensitive goods, high-value items, recalled products, quarantined stock, or items subject to regulatory or customer audit requirements.
Practitioners on Reddit who work in hospital labs describe a similar tiering approach. Routine specimens may travel through pneumatic tubes, while transplant tissues, frozen specimens, or irretrievable samples require hand delivery, tracking forms, and special handling. The same principle applies in fulfillment: match the custody level to the risk.
Step 2: Assign Unique Identification
Every custody record needs a reliable identifier. Depending on the item, this may be a UPC, GTIN, serial number, lot or batch number, expiration date, specimen ID, seal number, return authorization number, or internal WMS record ID. Without a unique identifier, there is no chain to build.
A practical note from lab professionals on Reddit: every relabeling is a chance to mislabel. Barcode visibility and label placement matter. A chain of custody procedure is only as strong as the scan quality and label discipline behind it.
Step 3: Receive and Verify
At dock receipt, the receiving team should:
- Scan inbound identifiers
- Match ASN, PO, SKU, lot, quantity, and expiration date
- Inspect external packaging
- Check seal condition
- Record temperature if required
- Photograph damage if present
- Create an exception record if anything does not match
21 CFR Part 205 requires each outside shipping container of prescription drugs to be visually examined upon receipt for identity and to prevent acceptance of contaminated or otherwise unfit products.
Step 4: Put Away Into Controlled Storage
Move inventory only through authorized workflows. Record the bin or location, handler, date and time, environmental zone, quarantine status (if applicable), and lot or expiry status.
For prescription drugs, 21 CFR Part 205 requires appropriate storage temperatures based on labeling or compendium requirements, along with temperature and humidity recording equipment or logs.
Step 5: Maintain Custody During Storage
Custody does not pause while items sit in a warehouse. The procedure should cover restricted access, inventory movement logs, cycle count rules, camera or security requirements, temperature and humidity monitoring, FEFO or FIFO rotation rules, and quarantine segregation.
Step 6: Pick, Pack, and Verify
At fulfillment:
- Scan item, location, order, and pack station
- Validate SKU, lot, serial, expiration, and quantity
- Apply packaging instructions
- Add tamper-evident seal or seal number if required
- Record packer identity and timestamp
- Add temperature-control materials if needed
- Create a custody event for the packed and staged shipment
Step 7: Transfer to Carrier or Courier
At carrier handoff, scan the package, confirm carrier and tracking number, record the handoff time, location, and person or system, and capture a signature or electronic acceptance.
CDC specimen guidance provides a practical model here: if the relinquishing and receiving parties are not together at transfer, the relinquishing party must document the express courier and tracking number or have the transporter sign to indicate control.
Step 8: Confirm Delivery or Recipient Acceptance
At destination, verify recipient identity, capture signature or scan with GPS and timestamp, record condition on arrival, note temperature data if applicable, and close the custody event (or initiate the next custody chain). CDC guidance specifies that each entity receiving specimens must sign off to close the prior entity’s chain, and each new entity begins its own.
Step 9: Handle Exceptions Immediately
When something goes wrong:
- Stop movement if product integrity is uncertain
- Segregate or quarantine the item
- Record the exception with full detail
- Notify responsible stakeholders
- Investigate root cause
- Decide disposition (restock, return to supplier, destroy, or hold)
- Document corrective action
- Reconcile system and physical inventory
21 CFR Part 205 requires damaged, deteriorated, misbranded, or questionable returned prescription drugs to be quarantined and physically separated until destroyed, returned, or proven to meet appropriate standards.
Step 10: Retain and Audit Records
Custody records should be retrievable for customer audits, regulatory inspections, insurance claims, recalls, disputes, and quality reviews. Retention periods depend on the product, jurisdiction, and contract. Some benchmarks: 21 CFR Part 205 requires certain wholesale drug distribution records to be available for three years. CLIA laboratory rules require many records to be retained for at least two years.
Chain of Custody in 3PL and Healthcare Logistics
For brands shipping healthcare products, diagnostics, or lot-controlled inventory, the chain of custody procedure must extend across every 3PL workflow: inbound receiving, WMS inventory controls, lot and expiry tracking with FEFO rotation, quarantine management, pick and pack verification, carrier handoff, returns inspection, disposition, and recall support.
The Drug Supply Chain Security Act (DSCSA) outlines steps toward interoperable, electronic package-level tracing of certain prescription drugs. For 3PLs operating in pharmaceutical supply chains, FDA states that wholesale distributors and third-party logistics providers must be appropriately licensed and report to FDA annually to be authorized trading partners under DSCSA.
If your brand ships healthcare, diagnostic, or lot-controlled products, your fulfillment partner’s chain of custody process should document custody from receiving through returns. Ask a prospective 3PL how custody events are captured in the WMS, how exceptions trigger alerts, and how returns are quarantined before restock or disposition. 4fillment’s healthcare logistics workflows include process support for lot and expiry tracking, FEFO, quarantine, and chain of custody documentation.
What Breaks Chain of Custody?
A chain of custody can be weakened or broken by:
- A missing handoff record or unidentified handler
- An unexplained time gap between custody events
- A broken or missing seal with no documentation
- A product found outside its authorized storage location
- A temperature excursion with no investigation or record
- A label mismatch or uncontrolled relabeling
- Unauthorized access to restricted inventory
- Missing delivery acceptance or signature
- Unreconciled quantity discrepancies
- Returned goods placed back into sellable stock without inspection
A “break” does not always mean the item is ruined or the record is invalid. The consequences depend on context. In a forensic drug test, a documentation gap may invalidate results entirely. Discussions on Student Doctor Network highlight that a medically valid test result may not be legally defensible if it was not collected under a forensic chain of custody procedure. In a fulfillment warehouse, a missed scan might trigger investigation, quarantine, or a corrective action rather than outright rejection.
Practitioners on Reddit who handle cold-chain logistics describe a particularly tricky scenario: temperature excursion disputes where shipper, carrier, and receiver each have different sensor data. The practical lesson is to define the primary temperature record before shipping, including calibration requirements, probe placement, and time synchronization.
Paper vs. Digital Chain of Custody
Paper chain of custody forms are simple and familiar. They are also prone to illegibility, loss, missing signatures, and slow retrieval during audits.
Digital systems (barcode scans, electronic signatures, WMS timestamps, GPS, photos, ePOD) create faster, more reliable records with built-in audit trails. But digital is not automatically better. The system needs access controls, reliable timestamps, identity verification, backup and retrieval capabilities, and clear exception handling.
In FDA-regulated contexts, 21 CFR Part 11 may apply when electronic records and signatures replace paper. The rule sets criteria for trustworthiness, reliability, and equivalence to handwritten signatures.
For most fulfillment operations, a WMS-driven digital chain of custody procedure is faster and more auditable than paper, as long as the underlying data integrity is sound.
The 5 C’s of Chain of Custody
This framework turns a documentation requirement into an operational checklist:
- Custodian: Who has control of the item right now?
- Chronology: When did each custody event happen?
- Condition: What was the item’s state at each event?
- Control: Was access restricted to authorized personnel?
- Closure: Was the transfer, exception, or disposition completed and documented?
If any of the five is missing at any point in the process, the chain has a gap.
Chain of Custody Checklist
Use this as a starting point for building or auditing a chain of custody procedure:
- Item uniquely identified (SKU, lot, serial, specimen ID)
- Lot, serial, and expiry captured if applicable
- Quantity verified at each handoff
- Condition checked and documented
- Current custodian recorded
- Relinquishing and receiving parties both recorded
- Date, time, and location captured
- Seal number recorded if tamper-evident seals are used
- Temperature or environmental data captured if required
- Exceptions documented immediately
- Quarantine and disposition process defined and followed
- Records retained per contract and regulatory requirements
- Audit trail retrievable within a defined timeframe
How Companies Measure Chain of Custody Performance
Turning chain of custody from a paperwork exercise into an operational metric means tracking specific KPIs:
- Custody scan compliance rate
- Unexplained custody gap count
- Average time between custody events
- Exception closure time
- Seal discrepancy rate
- Temperature excursion count and duration
- Quarantine release time
- Lot and expiry capture accuracy
- Return disposition accuracy
- Recall retrieval time
- Label reprint and relabeling rate
These numbers tell you whether your chain of custody procedure is working in practice or just exists on paper.
FAQ
What is a chain of custody procedure?
A chain of custody procedure is a written process for documenting the custody, control, transfer, handling, storage, and disposition of an item from start to finish. It records each custodian, date and time, location, transfer reason, item condition, and any exceptions. NIST defines it as tracking movement through collection, safeguarding, and analysis by documenting each handler, date, and purpose.
Does a tracking number prove chain of custody?
No. A tracking number shows carrier movement milestones. It does not prove internal warehouse custody, handler identity, item condition, lot or serial accuracy, seal integrity, or temperature history. Chain of custody requires documentation at every handoff, not just carrier scans.
What breaks chain of custody?
Common breaks include missing handoff records, unexplained time gaps, broken seals without documentation, products found outside authorized locations, temperature excursions without investigation, unauthorized access, and returned goods restocked without inspection. The severity depends on the product and applicable requirements.
How does chain of custody apply to medical specimens?
CLIA rules require laboratories to establish written policies for specimen collection, labeling, storage, transportation, and processing. CDC guidance specifies that each entity handling specimens maintains its own chain of custody form, signs off at transfer, and the next entity starts a new chain. Forensic specimens (such as employment drug tests) typically require stricter controls than routine clinical specimens.
Is digital chain of custody better than paper?
In most cases, yes. Digital systems provide faster recording, built-in timestamps, user identification, audit trails, and easier retrieval. However, digital records in FDA-regulated contexts may need to meet 21 CFR Part 11 requirements for electronic records and signatures.
How long should chain of custody records be kept?
It depends on the product, jurisdiction, and contract. 21 CFR Part 205 requires certain wholesale drug distribution records to be available for inspection for three years. CLIA requires many laboratory records to be retained for at least two years. Customer contracts or industry standards may set longer periods.
What is the difference between chain of custody and chain of ownership?
Chain of ownership shows who legally owns a product at each stage. Chain of custody shows who physically possessed and controlled it. A 3PL, for example, may have custody of inventory it does not own. Both records matter, but they answer different questions.
How does a 3PL maintain chain of custody?
A 3PL maintains chain of custody through WMS-controlled receiving, barcode scanning at every handoff, lot and expiry tracking, restricted storage zones, pick and pack verification, carrier handoff documentation, returns inspection with quarantine, and retrievable audit trails. For brands that need these controls, talk to 4fillment about healthcare fulfillment workflows with lot tracking, FEFO, quarantine, and chain of custody documentation built into daily operations.