Chain of Custody

Introduction to chain of custody

Chain of custody, often abbreviated as CoC, refers to the documented, chronological record capturing every stage of custody, control, transfer, analysis, and disposition of physical or digital evidence and materials. This process ensures integrity from initial discovery to final use—whether that’s presentation in a courtroom, regulatory approval, or consumer assurance about product origins.

While CoC originated in criminal investigations to prevent tampering and contamination, its application has expanded dramatically since the 1990s. Today, chain of custody is essential across civil litigation, laboratory testing for drug screening and clinical trials, and supply chain management spanning industries like timber, seafood, pharmaceuticals, and electronics. The growing emphasis on traceability traces back to post-1990s due diligence laws, 2010s modern slavery acts like the UK’s Modern Slavery Act 2015, and the 2020 publication of ISO 22095—the first international standard defining CoC terminology and models specifically for supply chains.

Understanding this concept first matters because failures have severe consequences. In a 2024 U.S. federal trial, DNA evidence from a sexual assault case was excluded after a lab technician failed to initial a seal transfer form, leading to acquittal. Similarly, the 2023 Johnson & Johnson talc contamination recall demonstrated how weak custody documentation slowed identification of affected batches, costing millions in market withdrawals and amplifying public distrust.

What is chain of custody and why is it important?

Chain of custody is the comprehensive chronological documentation encompassing discovery at the scene, collection by authorized personnel, secure packaging in tamper-evident containers, controlled storage under specified conditions, each transfer between handlers with dual signatures, laboratory analysis, detailed reporting of findings, and final disposition.

CoC functions dually as:

• A procedural discipline enforced by trained personnel
• A meticulous record—paper-based or digital—detailing precise dates, times, locations, identities of every handler, item descriptions, unique identifiers, and observed conditions at each stage

This documentation underpins authenticity by proving the item is what it claims to be, integrity by demonstrating no unauthorized changes occurred, and traceability by mapping its entire journey to the decision point.

The three pillars of chain of custody:

• Traceability: End-to-end tracking from origin to end-user prevents misidentification and ensures complete visibility
• Accountability: Clear responsibility assigned to named individuals for every action deters negligence through personal liability
• Transparency: Verifiable records open to audit enable independent verification by courts or third parties

The risks of deficient CoC are multifaceted: evidence suppression in court as seen in Ex parte Mills (Ala. 2010) where incomplete records raised tampering doubts, invalidation of drug test results leading to wrongful terminations, product liability lawsuits from contaminated goods, regulatory fines under frameworks like the EU’s REACH for chemical traceability failures, and brand damage as demonstrated in supply chain scandals.

Chain of custody in criminal and civil evidence handling

In criminal and civil contexts, CoC initiates at the crime scene. When police officers discover a firearm on June 15, 2025, the first responder photographs it in place, assigns a unique evidence tag like “EV-2025-0615-001,” collects fingerprints using gloves to avoid contamination, places it in a sealed evidence bag with initials over the tape, and logs initial details on an evidence collection form.

Typical documents required:

• Evidence collection form: Initial seizure details including date, time, location, collector’s name, and description
• Chain of custody form: Tracks all transfers with signatures of releaser and receiver plus reason
• Property receipt: Owner acknowledgment of item seizure
• Laboratory submission form: Specifies tests requested and analyst assignment

Common failures that erode admissibility:

• Missing initials over seals allowing resealing undetected
• Incomplete transfer logs omitting times or reasons
• Storage deviations like non-refrigerated biologicals risking degradation
• Undocumented removals for photography breaking continuity

Each transfer occurs between law enforcement, evidence technicians, forensic laboratories, and attorneys—demanding dual documentation to close gaps. According to Innocence Project data, 29% of DNA exonerations involved CoC lapses like unlabeled vials where breaks raised tampering suspicions.

For digital evidence—such as a mobile phone seized in 2026—CoC incorporates cryptographic hash values (e.g., SHA-256) computed at acquisition to baseline integrity, audit logs of all file accesses, and write-blockers preventing modifications during imaging, ensuring courts accept files as unaltered per NIST SP 800-101 standards.

Issues of concern in maintaining chain of custody

Maintaining a complete chain requires vigilance against multiple vulnerabilities that can undermine reliability.

Key risk areas and examples:

Risk Area	Concrete Impact
Undocumented transfers	A 2021 FBI audit found 15% of agency evidence logs had gaps due to verbal handoffs without forms
Unsecured storage	Items in unlocked rooms expose materials to theft or tampering
Inadequate training	Personnel unaware of protocols like dual-signing create documentation failures
Illegible handwriting	Renders logs useless in court when opposing counsel challenges records
Lost packaging labels	Wear or improper handling prevents identification

Breaks in the chain allow opposing counsel to challenge evidence authenticity, arguing reasonable doubt. In such cases involving an alleged crime, the prosecution may find original evidence ruled inadmissible despite scientific validity.

Environmental and handling concerns:

• Contamination risk for biological samples from unsealed proximity to other evidence
• Cross-contact between drug exhibits leading to false positives
• Degradation outside validated ranges (e.g., semen samples losing viability above 4°C)
• A 2019 lab recall of 500 toxicology samples occurred due to shared refrigeration

Mitigations demand rigorous standard operating procedures outlining every step, regular internal audits such as quarterly evidence room inventories verifying seals and logs, and periodic refresher training with simulations for all staff involved in handling collected materials.

Clinical and laboratory chain of custody (drug testing and clinical trials)

In clinical settings, CoC governs urine, blood, and tissue specimens in workplace drug testing programs, sports anti-doping, and clinical trials. Each person providing a specimen must be identified and the sample protected from collection to final analysis.

The clinical CoC process follows these steps:

1. Unique identifier assignment: Barcode like “SPEC-2026-0301-AB” assigned at collection
2. Witnessed collection: Direct observation protocols prevent substitution; donors sign multi-part forms confirming identity
3. Tamper-evident sealing: Specimens sealed in cups or tubes with time-stamped labels
4. Temperature-controlled transport: Sealed coolers maintaining 2-8°C for blood specimens
5. Laboratory accessioning: Clerks verify seals and log receipt condition
6. Analyst assignment: Digital timestamps record who performs analysis
7. Testing: Validated methods like GC-MS for drug detection
8. Post-analysis: Storage or destruction with final documentation

A multi-part CoC form travels with the specimen from collection site through courier handoff to laboratory, maintaining unbroken documentation. This defensibility holds in disputes—employment arbitrations upholding terminations via intact CoC, or WADA anti-doping bans affirmed by specimen tracking.

Laboratory information management systems (LIMS) automate logging with enforced mandatory fields, RFID scanning for handoffs, electronic signatures, and real-time alerts for breaches. These systems prove essential when maintaining records that must withstand legal scrutiny, as in SAMHSA guidelines for federal workplace testing requiring unbroken CoC to certify legally binding results.

Chain of custody in supply chain management and sustainability

Beyond forensics, CoC in modern supply chains tracks materials like food products, timber, metals, chemicals, and textiles from origin to consumer. ISO 22095:2020 standardizes terminology and models, aiming to enhance traceability, combat fraud, and minimize losses estimated at $30-50 billion annually in global food fraud per EU reports.

Supply chain CoC intersects sustainability through:

• EU Deforestation Regulation (EUDR) effective 2023: Mandates CoC for commodities like soy and palm oil to prove deforestation-free sourcing
• Conflict-minerals rules: U.S. Dodd-Frank Section 1502 requires 3T (tin, tantalum, tungsten, gold) smelters to document origins
• Modern slavery laws: Australia’s 2018 Act pushes visibility into human rights practices throughout production

Sector-specific applications:

Sector	CoC Application
Palmurasva	Tracing from mill to refinery with GPS-tagged harvests
Merenelävät	Vessel-to-retailer tracking via platforms like IBM Food Trust
Recycled plastics	Material flow through reprocessing plants with batch IDs
Kaakao	Verifying child-labor-free farms via documented ownership transfers
Aluminium	Power certificates tied to smelter inputs proving renewable sourcing

Companies deploy batch IDs, blockchain ledgers for immutable records, digital platforms, and third-party audits. These solutions enable customers to verify sustainability claims and regulators to enforce compliance.

Chain of custody models (identity preserved, mass balance, book & claim)

Not all supply chain CoC requires physical segregation. Different models balance traceability, cost, and operational feasibility depending on sector needs.

Identity Preserved

This model maintains full physical segregation where certified material never mixes with non-certified. For example, organic soy harvested in 2025 travels separately through milling to export, enabling exact molecule tracing. This approach offers the highest traceability and lowest fraud risk due to audits but carries significant cost premiums (20-50%) and is best suited for high-value sectors like pharmaceuticals.

Mass Balance

This model permits certified inputs to mix with conventional materials but reconciles outputs through bookkeeping—ensuring volume of certified content sold never exceeds certified input received. FSC wood products originate using this approach: 40% certified logs yield proportional certified lumber. Monthly reconciliation and audits provide moderate traceability at lower cost, though accounting errors create medium fraud risk. Common in biofuels and plastics.

Book and Claim

This model decouples certificates from physical flows entirely. A producer sells physical product uncertified but trades certificates to a user claiming attributes like renewable energy. This offers lowest cost but highest fraud risk from double-claiming, requiring robust registries. Prevalent in energy attributes (RECs) and FSC post-consumer wood products.

Model comparison summary:

• Traceability level: Identity Preserved (highest) > Mass Balance (moderate) > Book and Claim (lowest)
• Cost: Book and Claim (lowest) < Mass Balance (moderate) < Identity Preserved (highest)
• Fraud risk: Identity Preserved (lowest) < Mass Balance (medium) < Book and Claim (highest)

Sector-specific chain of custody: agriculture and forestry certification

CoC is central to agricultural and forestry schemes such as GLOBALG.A.P., the Forest Stewardship Council, and programs for coffee, cocoa, and palm oil. These certifications have expanded significantly over the past two decades.

Timeline of scheme expansion:

• Mid-2000s: CoC requirements introduced for aquaculture
• Early 2010s: Expansion to fruits and vegetables
• 2023: Mandatory CoC for all handlers of unpacked certified produce with on-product IDs

Key certification principles:

• Purchasing only from certified sources verified through the certification process
• Maintaining physical segregation where required by the chosen certification body
• Clear on-product identification (e.g., GLOBALG.A.P. Number or FSC licence code)
• Robust internal controls and documentation maintained on a daily basis

Who needs CoC certification:

• Producers and farmers
• Packers and packhouses
• Processors and manufacturers
• Brokers and traders
• Logistics hubs
• Retailers with in-house processing
• Foodservice brands

Mini case example: A 2023 Peruvian asparagus exporter obtained GLOBALG.A.P. CoC certification to meet EU retailer demands for a 2024 supermarket tender. By implementing RFID tracking for 100% traceability from farm to port, the certificate holder reduced rejection rates by 25%, demonstrating how certification creates competitive advantage while proving fsc certified materials meet market requirements.

Designing and documenting a robust chain of custody process

Organizations in any sector can build a defensible CoC system aligned with ISO 22095 and industry standards by following these steps.

Step-by-step implementation:

1. Map item flows: Identify all custody points from origin to final destination
2. Define custody points: Establish where transfers occur and who is responsible
3. Assign responsibilities: Create training matrices for all subsequent custodians
4. Design forms/digital workflows: Include mandatory fields that establish clear accountability
5. Choose identifiers: Implement barcodes, RFID tags, or serial numbers for unique tracking
6. Establish tamper-evident practices: Use frangible tape or smart sensors to detect interference

Essential documentation elements:

Element	Purpose
Item description	Clearly identifies what is being tracked
Unique ID	Prevents confusion between similar items
Date/time stamps	Creates chronological record
Person releasing	Establishes who had possession
Person receiving	Confirms transfer of ownership/custody
Condition on receipt	Documents state at each handoff
Storage location	Tracks secure place where item is held
Signatures/digital approvals	Provides legal verification

Training and verification:

• Conduct mock transfers during onboarding
• Perform quarterly evidence-room audits (a 2025 audit might find 5% documentation gaps)
• Implement error reporting via mobile apps for immediate correction
• Verify suppliers annually through on-site reviews

Compliance managers should conduct flow audits first, pilot digital LIMS systems in one department, then expand organization-wide based on lessons learned.

Audits, certification, and continuous improvement

Internal and external audit mechanisms verify CoC compliance against prescriptive criteria established by standards bodies.

Audit types:

• Internal audits: Monthly reviews of logs and SOPs by trained internal staff
• External certification: Annual audits by accredited bodies scoring compliance
• Surveillance audits: Every 1-2 years to maintain certification status

A certification body operates independently from standards owners or regulators to avoid conflicts of interest and preserve credibility. They conduct audits using criteria categories like “Major Must” (critical requirements where failure prevents certification) versus “Minor Must” (important but correctable nonconformities).

Preparing for an audit:

• Gap analysis comparing current practices to standard requirements
• Document review ensuring all records are complete and accessible
• Staff interviews verifying awareness of procedures
• Site walk-through checking physical controls
• Sample traceability exercises tracing finished product back to origin
• Corrective action plans addressing identified weaknesses

Realistic timeline: A mid-sized manufacturer typically achieves initial certification in 3-9 months via phased rollout, moving from planning through documentation to annual audit and certification.

Continuous improvement involves analyzing root causes of nonconformities, updating SOPs based on findings, investing in better labelling or IT systems, and expanding coverage to new sites or product lines. Organizations must conduct audits regularly and address findings proactively to maintain certification status.

Legal, regulatory, and ethical dimensions of chain of custody

Courts, regulators, and accreditation bodies view chain of custody as both a legal safeguard and an ethical duty to prevent manipulation or misrepresentation.

Regulatory frameworks relying on CoC:

• Evidence rules in criminal procedure codes requiring “reasonable probability” of no tampering
• Anti-doping regulations (WADA) in international sport
• Environmental regulations on hazardous waste (EPA)
• Deforestation-free product rules (EUDR)
• Conflict-mineral due diligence laws (Dodd-Frank Section 1502)

In court proceedings, whether the prosecution can prove a defendant guilty often depends on maintaining an unbroken chain. When procedures break down, even strong evidence may be ruled inadmissible, potentially preventing justice in cases involving criminal activity.

Ethical considerations:

• Protecting vulnerable workers in supply chains from exploitation
• Preventing food fraud that deceives customers about product origins
• Ensuring sustainability claims in 2025-2026 corporate reports rest on verifiable systems
• Upholding human rights through documented sourcing practices

Enforcement example: In 2024, the EU fined a palm oil trader €10M for fake CoC under EUDR, overturning sustainability claims and demonstrating that regulators are aware of fraudulent practices and willing to impose significant penalties.

Legal and regulatory frameworks continue evolving. The 2025 U.S. SEC climate rules tie disclosures to verifiable CoC, while the EU Corporate Sustainability Due Diligence Directive (2024) intensifies requirements for companies to document their supply chain practices.

Conclusion: future trends in chain of custody

Chain of custody continues evolving with digitalization, blockchain pilots, IoT sensors, and stricter sustainability regulations entering the late 2020s. Concrete technological trends include serialization of individual items enabling item-level tracking, real-time location monitoring of shipments, automated temperature logging integrated with LIMS, and smart seals that alert stakeholders immediately when tampering is detected.

Despite these innovations, the fundamentals persist: clear procedures, trained people, and reliable documentation that can withstand scrutiny in 2026 and beyond. Whether handling evidence in a criminal trial, managing specimens in clinical drug testing, or tracing wood products through a global supply chain, the principles of traceability, accountability, and transparency remain critical.

Organizations that treat chain of custody as a strategic capability—rather than a compliance burden—position themselves for legal defense, brand protection, and sustained public trust. The investment in robust CoC systems pays dividends across every context where proving authenticity, maintaining integrity, and demonstrating responsible production matters to courts, regulators, and customers alike.