A chain of custody form exists to answer one question months after the fact: who had this device, when, and in what condition. Auditors, lawyers, and insurers all ask some version of it, and the form either answers it or it does not. There is no partial credit for a record that was mostly filled in.
Most custody forms fail quietly. The fields that matter get skipped on move night, signatures are collected in a batch at the end of the shift, and nobody notices the gap until someone asks where a specific drive was between 2:00 and 4:30 in the morning. By then the people who could answer have moved on to the next job.
How Should the Form Identify Each Asset?
Every line on the form has to point at exactly one physical object.
Record your internal asset tag and the manufacturer serial number for each item, the same identifiers an enterprise asset inventory relies on. The asset tag ties the form to your inventory system; the serial ties it to the physical device if the tag has fallen off or been swapped. Recording only one of the two leaves a failure mode with no fallback.
For data-bearing components that travel separately from their host, list them individually. A server shipped with its drives removed is two custody events, and a form that lists the chassis but not the twelve drives in the lockbox beside it has recorded the least sensitive half of the shipment.
Include make, model, and a count per container. "Drives, qty: 1 box" invites exactly the dispute the form exists to prevent.
Record the Container and the Seal
Once equipment is packed, custody transfers at the container level, so the form has to link contents to container explicitly.
Each crate, case, or tote gets its own identifier and a manifest of what is inside. Each seal number is written on the form at the moment it is applied, by the person applying it, and checked against the physical seal by the person receiving. Tamper-evident seals and tracking only work when the seal number on paper can be compared with the seal on the case at every handoff.
If a seal is cut for inspection, whether by a customs officer, a site security guard, or your own team, the form records who cut it, why, the new seal number, and who witnessed the reseal. An unexplained seal change is the single most damaging entry a custody record can contain.
Which Handoffs Does the Form Need to Capture?
Every transfer of the equipment needs an entry, and each one needs the same fields: who released it, who received it, the date and time, the location, and the condition observed. For healthcare equipment, the HIPAA device and media controls already call for a record of hardware movements and the person responsible for each.
The common handoffs on an infrastructure move are:
- Production floor to packing area at the origin
- Packing area to vehicle
- Vehicle to vehicle, if there is a transfer
- Vehicle to receiving dock at the destination
- Dock to staging, and staging to final installation
Record the vehicle itself: unit number, trailer number, and plate. If the vehicle is swapped mid-route because of a breakdown, that is a handoff and it goes on the form. Driver names belong on the record too. On data center relocation projects that use escorted transport, add the escort's name and the times they were present.
Use printed names alongside signatures. A signature nobody can read identifies nobody.
Timestamps should be written at the time of transfer, not reconstructed afterward. A form where every handoff happened on the hour is a form someone filled in later.
Note Condition at Each Step
Condition fields protect both parties. The releasing party wants evidence that the equipment left in good order; the receiving party wants evidence of anything already wrong when they took it.
Keep it specific: visible damage, seal intact or not, shock or tilt indicators tripped. Photographs referenced by filename beat a narrative description and make insurance claims easier to support.
Condition exceptions need a place to be written down at the moment they are found. A receiver who notices a dented crate and signs anyway, without noting it, has accepted responsibility for the dent.
What Voids a Chain of Custody Record?
A custody record does not have to be falsified to be worthless. It only has to contain a gap that cannot be explained.
The usual culprits are an unaccounted period where nobody signed for the equipment, a seal number that changes without a documented reason, a count mismatch between origin and destination that was never reconciled, and signatures collected after the fact from people who were not present. Any of these lets an auditor, or opposing counsel, argue that the record does not show continuous control.
Gaps also appear at the edges. Custody often starts when the truck is loaded, leaving the hours the equipment spent in a hallway at origin unrecorded. It should start when the device leaves production and end with a signed acceptance at final installation, or at the certificate of destruction if the equipment is being retired, with media sanitization or destruction following NIST SP 800-88.
Reconcile counts at every handoff, not only at the destination. A discrepancy found at the dock is a missing crate. The same discrepancy found three days later is an investigation.
Should a Custody Form Be Paper or Digital?
Both work, and both fail in predictable ways.
Paper needs no connectivity in a basement loading dock, and a wet-ink signature is hard to dispute. It is also easy to lose, hard to search, and prone to missing pages. If paper is the primary record, scan it the same day and keep the original.
Digital systems enforce required fields, timestamp entries automatically, attach photos, and make reconciliation immediate. Their weaknesses are dead batteries, dead zones, and shared logins that make every signature look like the same person. Each person signing needs their own credential, and the system needs an offline mode that syncs without altering timestamps.
Whichever format you use, the form should feed directly into your audit-ready documentation package rather than living in a separate binder. A provider offering formal chain of custody services should be able to show you a completed sample from a previous engagement, redacted, before you sign.
Before move day, walk the form through one dry-run handoff with the people who will actually fill it in. The fields they skip in rehearsal are the fields that will be blank on the night.