Free printable template
IT Equipment Chain of Custody Form
Asset rows, seal numbers, a signed handoff log and an exceptions record on one printable form.
A chain of custody form for IT equipment is the signed record of who held each device, when, and in what condition, from the moment it leaves production until someone accepts it at the destination. This free printable template records assets, seal numbers, every handoff, client media attestations and exceptions on US Letter paper.
Use one form per shipment or move bundle. Fill in the header and asset rows when equipment is packed, then add a line to the handoff log every time the equipment changes hands. The guidance under the form explains each field, based on our guide to what a chain of custody form should include.
Type into the fields and print, or print it blank and fill it in by hand. Only the form prints; this page text and the site menus are left off.
IT Equipment Chain of Custody Form
One form per shipment or move bundle. Write times when the transfer happens, not afterwards. Page ___ of ___
Template: datatechlogistics.com/tools/
1. Assets and seals
| # | Asset tag | Serial number | Make / model | Data-bearing | Container ID / seal no. | Condition at handoff |
|---|---|---|---|---|---|---|
| 1 | ||||||
| 2 | ||||||
| 3 | ||||||
| 4 | ||||||
| 5 | ||||||
| 6 | ||||||
| 7 | ||||||
| 8 | ||||||
| 9 | ||||||
| 10 | ||||||
| 11 | ||||||
| 12 |
List drives and other data-bearing parts that travel apart from their host on their own rows. Write each seal number when the seal is applied. Use extra pages for more rows.
2. Handoff log
| Handoff | Party | Printed name | Organization | Signature |
|---|---|---|---|---|
| 1 | Seal intact | |||
| Released by | ||||
| Received by | ||||
| 2 | Seal intact | |||
| Released by | ||||
| Received by | ||||
| 3 | Seal intact | |||
| Released by | ||||
| Received by | ||||
| 4 | Seal intact | |||
| Released by | ||||
| Received by | ||||
| 5 | Seal intact | |||
| Released by | ||||
| Received by | ||||
| 6 | Seal intact | |||
| Released by | ||||
| Received by | ||||
3. Client media attestation
The carrier records this attestation. It does not verify encryption, and it does not access, encrypt or handle the data on any device.
4. Exceptions
| # | Date / time | Asset or container | What happened and why | Old / new seal no. | Witness (name) |
|---|---|---|---|---|---|
| 1 | |||||
| 2 | |||||
| 3 | |||||
| 4 |
Record every seal cut or replaced, count that does not match, damage found, and tripped shock or tilt indicator, with photo file names where you have them.
5. Custody closed: accepted at final position
What should a chain of custody form record?
Every row on the form has to point at exactly one physical object. Record both your internal asset tag and the manufacturer serial number: the tag ties the form to your inventory, and the serial still identifies the device if the tag falls off. Mark whether each item is data-bearing, and give drives that travel apart from their host their own rows, because a chassis listed without the drives in the lockbox beside it records the least sensitive half of the shipment.
Once equipment is packed, custody moves at the container level, so each row also carries a container ID and seal number, written by the person who applies the seal at the moment it goes on. The condition column captures visible damage and anything already wrong at the handoff. The header ties the whole form to one shipment or move ID, an origin and a destination, so it can be filed with the move record and found later.
Who signs at each handoff?
Two people sign every transfer: the person releasing the equipment and the person receiving it, each with a printed name, organization and signature. A signature nobody can read identifies nobody, so the printed name matters as much as the signature. On a typical infrastructure move the handoffs are production floor to packing area, packing area to vehicle, vehicle to receiving dock, and dock to staging and final position.
Each block in the handoff log also records the date and time, the location, the vehicle or trailer ID, and whether the seal was intact when checked against the number on the form. A vehicle swap after a breakdown is a handoff and gets its own block. If the move uses a secure transit escort, put the escort's name and times in the notes line. Write times when the transfer happens. A log where every handoff landed on the hour was filled in later.
What voids a chain of custody?
A custody record does not have to be falsified to be worthless. It only needs a gap nobody can explain. The usual causes are a period when nobody signed for the equipment, a seal number that changes without a recorded reason, a count mismatch between origin and destination that was never reconciled, and signatures collected after the fact from people who were not there.
The exceptions section exists to close those gaps while they are still small. If a seal is cut for inspection by site security, a customs officer or your own team, record who cut it, why, the new seal number and who witnessed the reseal. Reconcile counts at every handoff, not only at the destination: a discrepancy found at the dock is a missing crate, and the same discrepancy found three days later is an investigation. Start the record when equipment leaves production, not when the truck is loaded, and close it with a signed acceptance at the final position.
How does the form handle client-encrypted media?
Many shippers encrypt drives before a move so that a lost device exposes nothing. The form records that as an attestation from the client's IT team, with a printed name, title, signature and date, and a list of the asset rows it covers. The carrier writes the attestation down. It does not check whether the encryption is in place, and it never accesses, encrypts or administers the data on any device.
That split keeps each party responsible for what it can actually see. The crew can confirm that a sealed case arrived with its seal intact; only your IT team can confirm what state the data inside was in. DataTech Logistics works on that basis: physical handling, transport and documentation, with data and software decisions left to your IT team. When retired equipment needs wiping or destruction, that work is performed by a licensed contractor, and its certificate is filed with this form.
Which standards ask for a record like this?
Two widely used references describe the same idea. NIST SP 800-53 Rev. 5, control MP-5 (Media Transport), asks organizations to protect and control system media during transport outside controlled areas, maintain accountability for that media during transport, document activities associated with the transport, and restrict those activities to authorized personnel.
For healthcare organizations, the HIPAA Security Rule's physical safeguards at 45 CFR 164.310 include device and media controls, with an accountability specification to maintain a record of the movements of hardware and electronic media and any person responsible for them. A filled-in custody form is one practical way to produce that record for a move. Neither source prescribes this exact layout, so adapt the fields to your own policy and auditors. Our chain of custody service uses the same handoff discipline on every move, and seals are covered in more depth in tamper-evident seals and GPS tracking for IT shipments.
Get in Touch
Need a crew that fills in every handoff?
Tell us about the equipment, the route and your custody requirements, and we will plan the physical move and its documentation.