Topic hub

Chain of Custody

What a custody record contains, how a form is completed and by whom, and what follows when there is a gap in the chain — for physical items and for digital evidence.

About chain of custody

Published guides

• How to Fill Out a Chain of Custody Form (With Example)

  A chain-of-custody form documents the life of an evidence item from collection to disposition. Fill it out completely and at the time each event occurs. Here are the fields, and why each one matters.

• Chain of Custody Form Template: Fields and Common Gaps

  A sound chain of custody template must document identity, date, time, and purpose for each custodial transfer, with additional technical fields for digital evidence. Common circulated templates omit time zones, absence-of-alteration notation, and device-condition documentation—gaps that invite challenge.

• Chain of Custody Best Practices for Law Enforcement

  Challenges to evidence rarely allege tampering; they point to gaps. The strongest position is to leave as few gaps as possible. Seven concrete practices—informed by federal evidence law and published guidance—reduce the intervals courts scrutinize.

• Broken Chain of Custody: What It Means and What Follows

  A broken chain of custody occurs when the record lacks continuity—a gap, missing person, or unaccounted-for period in the transfer or handling of evidence. Most courts treat such gaps as going to the weight of the evidence rather than its admissibility, so the evidence usually comes in and a jury or judge may discount its reliability. Evidence can still be excluded if gaps prevent a reasonable finding that it is what it is claimed to be.

• Chain of Custody for Digital Evidence: How It Differs

  Digital evidence operates under a fundamentally different chain of custody model than physical evidence. Where physical custody depends on exclusive possession and documentation of access, digital custody depends on process integrity, hash verification, and reproducibility—because authentic copies are indistinguishable from originals.

• Who Is Responsible for Maintaining Chain of Custody?

  Every person who handles evidence must sign and be identified on the chain of custody record. Signatures are created when evidence is collected, transferred between handlers, and received into storage or analysis. They document accountability at each step—not authentication of the evidence itself.

• Chain of Custody Log: A Worked Example

  A chain of custody log is a chronological record showing who possessed evidence, when, and in what condition—each entry identifying the handler, date and time, reason for transfer, and the evidence's physical state at that moment. This guide presents an illustrative log with complete entries, explains what makes an entry sufficient, and identifies common gaps that can undermine the evidentiary record.

• Chain of Custody Software: How to Evaluate It

  Chain of custody software must document every movement of evidence—who handled it, when, and for what purpose—in a way that supports legal authentication without requiring the vendor's system for verification. The software's job is to create and maintain custody records; it need not store the evidence itself, and the records it produces should be exportable and verifiable by a court or opposing counsel without continued access to the hosting platform.

• Chain of Custody Audit Checklist: What to Review

  A chain of custody audit verifies that evidence has been recorded, identified, handled, and transferred without substitution, tampering, contamination, or unexplained gaps. The audit checklist confirms signature and date documentation at each transfer; unique and consistent item identification; condition notation; complete temporal records; and, where applicable, verified integrity values such as hash calculations or forensic seals.

• Chain of Custody for Private Investigators

  Private investigators who handle physical or digital evidence—whether obtained directly or received from clients—should document custody in ways that support authentication under Federal Rule of Evidence 901. Standard practice is for each person who assumes custody to record their name, the date and time, and the purpose of custody. The difference is not what gets documented, but that a private investigator's chain-of-custody record may authenticate evidence through testimony rather than formal certification, and the chain typically terminates when the evidence reaches an attorney, lab, or court.

• Paper vs Electronic Chain of Custody Records

  Both paper and electronic forms of chain of custody documentation are legally acceptable, but they serve different evidentiary functions and create different risks. Understanding the distinction—and where the law is silent—is essential for anyone handling evidence.

• Chain of Custody Form for Digital Evidence: Key Fields

  A traditional chain of custody form for physical evidence cannot capture the technical data that digital evidence demands. A digital evidence chain of custody form must document hash values, acquisition tools with version numbers, device identifiers, and the method by which data was collected—fields that have no place on a paper evidence form but are essential to establishing that digital evidence has not been altered.

• Fillable Chain of Custody Form: What It Records

  When you complete a fillable chain of custody form digitally, you create two kinds of records at once: the visible form data (names, dates, evidence descriptions) and invisible metadata that documents *how* and *when* the form was completed and by whom. Understanding what gets recorded—and what remains detectable or auditable afterward—is essential to defending the integrity of the evidence record before it is ever tested in court.

Common questions

Who signs a chain of custody form?

Both sides of every handoff: the party releasing the item and the party receiving it. A transfer recorded by one side alone leaves the other free to say they never took it, or took something else. Where a procedure calls for a witness, that signature is a third line rather than a substitute for either of the first two. Who Is Responsible for Maintaining Chain of Custody? →

What are the most common chain of custody errors?

Transfers signed by only one party, times recorded without a zone, item descriptions that would fit three items in the same case, entries written days after the event, and working copies made with no entry of their own. None of these are exotic, and all of them are visible on a review of the file — which is why an audit pass before disclosure is worth the hour it costs.

How long does evidence have to be kept?

There is no single period. Retention is set by statute for particular evidence types, by an agency's own schedule, and by the status of the case, and the clock can restart. One point is easy to miss: the custody record generally has to outlive the item it describes, because the question asked afterwards is what happened to it.

Can a third party verify a record without access to the system?

That is the test worth applying to any custody system, because a record only settles an argument if the other side can check it themselves. CustodyTrack records are verifiable from a code alone, at no cost and without an account, and verifying discloses nothing about the item — the result shows hash values and dates, not the details entered on the form. Chain of Custody Software: How to Evaluate It →

Related subjects

• Digital Evidence Admissibility

  Authentication, the certification routes, and the exhibit types that draw the most argument.

• Hash Verification & Integrity

  Digests, what a match establishes, and how chained records make alteration detectable.

• Evidence Handling Workflows

  Collection through presentation, the guidance behind it, and who is accountable at each stage.