October 3, 2026 · Chain of Custody
Paper vs Electronic Chain of Custody Records
Both paper and electronic forms of chain of custody documentation are legally acceptable, but they serve different evidentiary functions and create different risks. Understanding the distinction—and where the law is silent—is essential for anyone handling evidence.
Both paper and electronic chain of custody forms are legally acceptable
A chain of custody record may be maintained on paper or electronically; neither form is prohibited or inherently superior in the eyes of evidence law. Authentication of evidence—proof that the object in court is the same object collected at the scene—may be established by testimony from a knowledgeable witness such as a law enforcement officer, who need not rely exclusively on a written form at all. [1] The critical distinction is not the medium but what the record documents and whether that documentation is clear, contemporaneous, and available for cross-examination when the evidence is offered in court.
However, the legal permissibility of a format and the practical reliability of custody documentation are different questions. The choice between paper and electronic records shapes what risks emerge and what gaps become visible later—facts that matter whether or not the evidence ultimately enters the record.
Why the chain of custody format matters to authentication under FRE 901
Federal Rule of Evidence 901(a) requires that evidence be authenticated—that is, supported by evidence sufficient to support a finding that the matter in question is what its proponent claims. [1] For physical evidence removed from a crime scene, vehicle, or secure storage, this means establishing a chain—a chronological record showing who held the item, when, where, and under what conditions—so that the fact-finder can assess whether the item could have been altered, contaminated, or substituted.
When evidence is stored electronically or by similar means—meaning the original form has been converted to digital data—custody documentation becomes more important because the appearance of the digital version cannot be relied upon to verify authenticity. A digital photograph of a ransom note and the note itself look different; so does a forensic image of a hard drive and the drive itself. Absent robust custody documentation, a fact-finder cannot verify that the digital version matches the original seized object or that nothing has been added or removed in the interval.
This requirement applies to chain of custody documentation itself: the form (or forms) recording transfers must be authenticated, and their accuracy may be challenged. A custody record that is faded, illegible, contradicted by other evidence, or missing required details may be admitted but with reduced weight—it goes to credibility and persuasiveness, not to whether the evidence as a whole is admissible. [3] Gaps or weaknesses in custody documentation affect how a fact-finder assesses the evidence's reliability, not whether it enters the record at all.
What paper chain of custody records accomplish
A paper form, completed and signed at the moment evidence is transferred from one custodian to another, creates an immediately fixed record of that event. The signature, date, and time are recorded in ink (or ballpoint) at a specific place and moment; no subsequent editing is possible without leaving a visible mark. Each transfer generates a new page or section, creating a physical trail that grows with the evidence itself.
Paper custody forms have legal standing under state and federal evidence law. Massachusetts regulation 515 CMR 7.11, which exemplifies widespread practice, requires that when evidence is removed from secure storage, the item transferred, personnel making the transfer, and new custody location be documented. [8] This documentation may be on paper; the regulation does not mandate an electronic alternative. The form travels with the evidence—sometimes physically, sometimes as a photograph or PDF—and becomes part of the trial record itself, available for impeachment if a witness's testimony contradicts what the form says.
A paper record also has no dependency on vendor systems, software updates, or database access. It cannot be remotely altered; it requires physical access to the document itself. These properties make paper custody forms a durable backup for any jurisdiction's evidence management system and a safeguard when electronic records are questioned.
What electronic chain of custody records accomplish
An electronic chain of custody record—maintained in a database, evidence management system, or digital log—creates a structured, searchable, and tamper-evident record of every access, transfer, and condition of evidence over its entire lifecycle.
Electronic custody records accomplish three core functions: integrity (evidence has not been altered during transfer), traceability (evidence can be traced from collection until destruction), and authentication (all entities interacting with evidence must provide proof of identity). [3] A well-designed system records not only who transferred the evidence and when but also the purpose of each access, the location of the evidence, its condition, and (for digital evidence) cryptographic hashes or other integrity checks.
When a forensic examination produces a hash value—a mathematical fingerprint of a digital object's contents—an electronic custody system can store that hash as a record of the state of the data at that moment. [3] Any subsequent alteration of the data will produce a different hash, making tampering detectable. Electronic systems can also create audit trails: a record of every time the custody record itself was accessed or edited, and by whom, which is difficult or impossible to maintain on paper.
Chain of custody documentation for electronically stored evidence may differ from paper forms, and custody protocols in a digital evidence environment may include additional security measures to reduce unauthorized access or alteration. [3]
How paper and electronic records intersect in practice
Some law enforcement agencies and evidence custodians maintain both paper and electronic custody records in parallel. An officer may complete a paper form at the moment of transfer; that form (or a photograph of it) is then entered into an electronic database. The paper copy travels with the evidence or is filed separately; the electronic record stays in the management system and is used for queries, audits, and access logs.
This hybrid approach offers redundancy: if one record is unclear or questioned, the other may corroborate it. The specific protocols governing how both forms are maintained and reconciled depend on agency policy and local evidence management practices.
How custody documentation gaps surface in cross-examination and at trial
Once evidence is offered at trial, the prosecutor or evidence custodian may be asked to establish the chain through witness testimony. Typically, this is done by calling each person who handled the evidence—or, if that is impractical, by offering the chain of custody record itself as proof of the sequence of transfers. [1] The opposing party is entitled to cross-examine any witness and to challenge the accuracy or completeness of any custody record.
If the paper form and the electronic record disagree on a key fact—the date of transfer, the identity of the custodian, the condition of the evidence—that discrepancy will likely emerge during cross-examination. Counsel for the defendant can point to the contradiction and argue that it undermines the prosecution's proof of authenticity. A judge, or jury if the case is tried to a jury, will weigh the competing evidence and decide which record (if either) is credible.
Under FRE 901(a), the prosecutor must establish evidence sufficient to support a finding that the evidence is authentic. [1] Gaps or inconsistencies in custody documentation do not guarantee that evidence will be excluded; they create a factual question for the fact-finder to resolve. But the clearer, more consistent, and more complete the custody record—whether paper, electronic, or both—the stronger the foundation for admission.
Key takeaway for evidence custodians and investigators
The choice between paper and electronic custody records is not a choice between legally acceptable and unacceptable formats. Both are permissible under Federal Rules of Evidence; many courts and agencies use both in tandem. What matters is that the record, in whatever form it takes, is accurate, contemporaneous, complete, and available for examination by opposing counsel. Any gaps, illegibilities, contradictions, or missing details will be exposed during cross-examination and will affect the weight the fact-finder assigns to the evidence itself.
Neither paper nor electronic custody records are self-executing or self-protecting. Both require discipline: careful notation at the time of transfer, adherence to chain of custody procedure, and honest documentation of any breaks, delays, or uncertainty. The strengths and weaknesses of each format—paper's immutability and independence, electronic systems' traceability and audit capability—are best exploited when both are available and reconciled against each other before evidence is offered in court.
Common questions
- Is an electronic chain of custody record legally acceptable?
- Yes. Electronic chain of custody records are permissible under Federal Rule of Evidence 901 and need not be supplemented by a paper form, though many agencies maintain both. [1] Authentication of evidence may be established via testimony from a knowledgeable witness—such as a law enforcement officer—who can testify to where the evidence came from and connect it to other evidence in the case, regardless of whether that testimony is supported by a paper form, an electronic log, or both. [1]
- What does a paper chain of custody form do that an electronic record does not?
- A paper form creates an immediately fixed, visibly signed record at the moment of transfer that cannot be edited without leaving a trace; it has no dependency on software, vendor systems, or database access; and it can travel with the evidence as a physical backup. [8] An electronic record, by contrast, can generate audit trails showing every access and edit, create hash values for digital evidence that make alteration detectable, and enable rapid retrieval and analysis of custody information across many items and transfers. [3] Neither format is inherently superior; they serve different institutional and evidentiary functions.
- Should an agency keep both a paper and an electronic chain of custody record?
- Agencies may maintain both paper and electronic records as a matter of practice, which offers redundancy and cross-corroboration. The decision depends on an agency's evidence management policy, institutional resources, and local evidentiary requirements.
- What happens if the paper chain of custody form and the electronic record disagree?
- Any contradiction in custody documentation will likely emerge during cross-examination at trial and will be weighed by the fact-finder as a matter affecting the credibility and weight of the evidence, not necessarily its admissibility. [3] Resolution depends on the facts presented and the evidence offered to explain or reconcile the discrepancy.
Sources
- [1] Federal Rules of Evidence Rule 901: Authenticating or Identifying Evidence — Legal Information Institute, Cornell Law School
- [2] Federal Rules of Evidence Rule 901: Authenticating or Identifying Evidence — Government Publishing Office
- [3] Computer Forensics: Characteristics and Preservation of Digital Evidence — Office of Justice Programs, U.S. Department of Justice
- [4] Core Criminal Law Subjects: Evidence: Authentication — Armed Forces Court of Appeals
- [5] Video Evidence: A Primer for Prosecutors (October 2016) — Office of Justice Programs, U.S. Department of Justice
- [6] Digital Evidence and the U.S. Criminal Justice System — National Institute of Justice, U.S. Department of Justice
- [7] Managing Digital Evidence in Courts: JTC Resource Bulletin Version 1.0 — Bureau of Justice Assistance, National Center for State Courts
- [8] Chain of Custody: 515 CMR 7.11 — Legal Information Institute, Cornell Law School
- [9] NIST Interagency Report NIST IR 8387: Digital Evidence Preservation — National Institute of Standards and Technology
- [10] Federal Rule of Evidence 902 — Evidence That Is Self-Authenticating (including 902(13) and 902(14) and the Advisory Committee Notes) — Legal Information Institute, Cornell Law School
- [11] NIST SP 800-86 — Guide to Integrating Forensic Techniques into Incident Response — National Institute of Standards and Technology
- [12] Electronic Crime Scene Investigation: A Guide for First Responders, 2nd Edition — National Institute of Justice, U.S. Department of Justice
- [13] Forensic Examination of Digital Evidence: A Guide for Law Enforcement — National Institute of Justice, U.S. Department of Justice
- [14] SWGDE Published Documents — Best Practices and Position Papers — Scientific Working Group on Digital Evidence
CustodyTrack creates tamper-evident chain-of-custody records that any third party can verify. See how it works →
For this audience: Chain of Custody for Law Enforcement & Crime Labs