Chain-of-Custody for Data-Bearing Media

Chain of custody for data-bearing media is the signed, unbroken record of who held each drive, tape or storage device, where, and when, from the moment it leaves your rack until it is delivered or destroyed. We build that record with serial-number manifests, serialized tamper-evident seals, GPS tracking and a signature at every handoff.

Why does chain of custody matter for drives and tapes?

Because an auditor will ask you to prove that media stayed under control, and “the movers had it” is not proof. When drives, tapes or storage appliances leave a controlled space, the organization that owns the data stays responsible for it. A complete custody record shows that only named, authorized people handled the media, that containers were not opened, and that every serial number that left arrived. Without it, a single missing drive can turn into a reportable incident, because you cannot show where it went. Regulators expect this kind of evidence. Healthcare organizations must keep records of hardware and media movements under the HIPAA device and media controls, and card-processing environments track media under PCI DSS requirements. Our guide to maintaining chain of custody during relocations covers how this works on a full data center move.

What does a chain-of-custody record include?

A usable record answers five questions for every item: what it is, who had it, where it was, when it changed hands, and in what condition. We capture that at each handoff, from de-installation through delivery or drive destruction.

Field	Example
Item	Make, model, serial number, asset tag
Container	Case ID and seal number
Handoff	Releasing and receiving names, signatures
Time and place	Date, time, address or GPS point
Condition	Seal intact, photos taken

Records are kept per item, not per truckload, so any single drive can be traced end to end. A blank chain-of-custody form shows the layout we use, and our article on audit-ready documentation explains how auditors read these records. Exceptions, such as a damaged seal, are logged with photos on the spot. You receive the completed record at the end of the job, in a format your compliance team can file.

How do seals and GPS tracking fit together?

They prove different things, which is why we use both. Serialized tamper-evident seals prove a container was not opened between two signed handoffs. If a seal number on arrival does not match the record, or the seal shows signs of tampering, you know exactly which leg of the trip to investigate. GPS tracking proves where the vehicle was and when, with geofenced alerts if it leaves the planned route. Together they cover both the container and the journey. Photos at packing and unpacking add a visual record of seal condition. For high-value or sensitive loads, a security escort can add 24/7 physical surveillance in transit, so a trained person also has eyes on the shipment the whole way. Our guide to tamper-evident seals and GPS tracking covers both controls in more detail, including what to do when an auditor asks for the tracking log.

What happens when media is going to destruction?

The record carries on until the media no longer exists. Drives and tapes headed for shredding or degaussing travel under the same seals, tracking and signatures as production media, because their data is just as exposed until destruction is done. At the destruction point, seals are checked against the record, serial numbers are scanned, and each item is matched to its destruction entry. Your certificate of destruction then lists the same serial numbers as the custody record, so the two documents close the loop together. Where you choose software wiping or cryptographic erasure instead, that work is performed by a licensed contractor, and the contractor’s report is attached to the same record. The methods themselves follow the NIST SP 800-88 media guidelines. We never access the data on the media. Your team confirms which items go to destruction, and we keep custody until it is complete.