Chain of Custody Hardware: Records That Withstand Challenge
Chain of custody records who had an item, when, and what happened to it. Unlike inventory, the record has to withstand challenge — which means the hardware supporting it needs to produce evidence rather than convenience.
The record has to survive scrutiny
That single requirement drives everything else.
An inventory system that is approximately right is useful. A custody record that is approximately right is worthless, because its purpose is to answer a question later, under challenge, possibly years after the fact.
Three consequences.
Every transfer is scanned, not typed. A scan of the item is evidence that the item was present. A typed reference is evidence that someone typed a reference.
The identity must be unique and permanent. A relabelled item, or one whose label has degraded, breaks the chain at that point.
Gaps matter as much as entries. A period with no record is a period that cannot be accounted for, and the system should make gaps visible rather than allowing them to pass unnoticed.
Labels that cannot quietly fail
Where most custody systems are weakest, because labelling gets specified as a stationery item.
Thermal transfer, never direct thermal. Direct thermal fades within months, and an item in storage for years will become unidentifiable. That is not a degraded label — it is a broken chain. Our media guide covers the distinction.
Synthetic facestock with a resin ribbon, resisting handling, moisture and any chemicals involved.
Tamper-evident stock where removal should be visible. A label that destroys itself on removal, leaving a pattern behind, records interference in a way an ordinary label does not.
Adhesive matched to the surface and the storage temperature, including cold where items go into refrigerated or frozen storage — standard adhesive applied to a chilled surface fails silently, as our cold chain guide covers.
Include human-readable text alongside the code. When a label degrades or a scanner is unavailable, that text is what keeps the item identifiable — and over long retention it will matter.
What the device has to capture
More than a code, which is why this is a mobile computer requirement rather than a scanner one.
Identity of the item, by scan.
Identity of the person, ideally by their own credential rather than by selection from a list — a name chosen from a dropdown is weaker evidence than a scanned or authenticated identity.
Time and location, recorded automatically rather than entered.
Condition, by photograph, particularly at transfer points. Camera quality matters in the poor lighting typical of stores and evidence rooms.
Signature where a physical handover is acknowledged.
Our returns processing guide covers the same evidence-capture principle in a commercial setting, and the reasoning is identical: what is not captured at the moment is unrecoverable afterwards.
Offline working is a requirement
Custody transfers happen in stores, basements, vehicles and buildings without networks.
A system that cannot record a transfer while disconnected either blocks the transfer or pushes people to record it on paper afterwards — and a paper note transcribed later is exactly the weak link the system exists to remove.
Two requirements. Record offline and upload on reconnection, as our field service guide covers for similar conditions. And preserve the true time of the event rather than the time of upload, since the timeline is the point.
Scanning conditions are poor
Three practical points.
Labels are handled and stored for long periods, so they arrive at a scan scuffed, creased or dusty. 2D codes with error correction tolerate that where linear codes fail — our symbologies guide covers why.
Lighting is frequently poor, in stores, cages and vehicles.
Items may be inside sealed packaging, read through a bag or a window. That affects reading angle and reflectivity, and is worth testing with real packaging rather than a bare label.
The audit is on the process, not the device
Worth stating because it changes where effort goes.
Good hardware supports a defensible record; it does not create one. What withstands challenge is a consistent process, applied the same way by everyone, with the gaps visible.
Two things follow.
Standardise the equipment, so every location captures the same fields the same way. Our standardisation guide covers why variety costs more than it saves.
Train for the exceptions, since that is where records break — what to do when a label is unreadable, when the device is offline, when an item arrives without a record. Our deployment guide covers why the workaround becomes the process if nobody hears about it.
Common questions
Why must transfers be scanned rather than typed?
Because a scan of the item is evidence the item was present, where a typed reference is only evidence that someone typed a reference. The record has to withstand challenge rather than merely be useful.
What label media suits custody work?
Thermal transfer onto synthetic facestock with a resin ribbon, never direct thermal, which fades within months and leaves an item unidentifiable. Tamper-evident stock where removal should be visible, and adhesive matched to storage temperature.
Why is a scanner alone insufficient?
Because the record needs the person’s identity, time, location, condition photographs and frequently a signature — not just the item code. What is not captured at the moment is unrecoverable afterwards.
What happens if there is no network at a transfer point?
The device must record offline and upload on reconnection, preserving the true time of the event rather than the upload time. Otherwise people record on paper and transcribe later, which is the weak link the system exists to remove.
Does better hardware make a record defensible?
It supports one rather than creating one. What withstands challenge is a consistent process applied the same way everywhere with gaps visible — which argues for standardised equipment and training focused on the exceptions.
Tell us the storage conditions and retention period and we will specify labels that keep the chain intact.
