Chain-of-Custody Recordkeeping for Laboratory Materials

A certificate of analysis tells you what a laboratory measured. It doesn't tell you that the vial the laboratory measured is the vial sitting in front of you. That second question — identity across time and hands — is what chain-of-custody recordkeeping exists to answer, and for research-grade compounds supplied for research use only, it's the layer every other quality number quietly depends on. Below: what a custody record is, the information it has to carry, how labeling and sealing anchor it, what the FDA's Good Laboratory Practice rules require a facility to write down, and what a missing link costs.

What Chain of Custody Means for Laboratory Materials

In plain terms, it's a continuous, dated, signed history of a physical item. Not a form you file once and forget. The standard definition describes it as the chronological documentation that records the sequence of custody, control, transfer, analysis, and disposition of materials. The word doing the work is sequence; a custody record is only as good as its continuity.

Reference literature describes three primary purposes for custody documentation: it allows the analytical laboratory to be asked pertinent questions about its testing, it maintains the custody record itself, and it documents that the sample was handled only by approved personnel and was never accessible for tampering before analysis. That third purpose is the one researchers tend to underweight. The record isn't a logistics artifact — it's affirmative evidence that nothing unaccounted-for happened.

The concept migrated into laboratory practice from forensics because the underlying problem is identical: proving the item on the bench is the item that was collected. In both settings the governing rule is the same — an identifiable person must have physical custody of the item at all times.

The Minimum Data Set Every Custody Record Carries

The short answer to "what has to be written down" is five categories plus a signature at every handoff. The documentation should capture the conditions under which the material was gathered, the identity of all handlers, the duration of custody, the security conditions while handling or storing it, and the manner in which it is transferred to each subsequent custodian — with the signatures of everyone involved at each step.

Per transfer, the field list is consistent across forensic and laboratory sources. A review of modern custody practice notes that required information includes unique identifiers, names and signatures of the personnel involved, collection location and timing, sample descriptions, the type of analysis requested, and witness signatures, with the form recording every transmission from person to person since the material was first taken into custody.

It's worth separating this from the analytical paperwork. A certificate of analysis reports measured properties; the custody record reports provenance. Read together they answer "what is this material" and "is this the material that was tested." Read apart, each leaves the other's claim unsupported.

Labeling, Unique Identifiers, and Tamper-Evident Seals

The container label is the anchor the whole record hangs on, which is why sample-handling procedures are specific about it. Each label must carry a unique identification code along with the location, the date and time of collection, the name and signature of the person who collected it, and the signature of any witness. Without a unique code every downstream entry is ambiguous. With one, each line of the log points at exactly one physical object.

Labeling also intersects with the regulatory status of the material. For research-grade compounds, the custody label and the research-use-only labeling on the product serve different functions and both have to be right — one establishes traceability, the other permitted scope.

Physical control sits alongside the paperwork. Standard practice is to package material so transit damage would be visible and to seal it with tamper-evident bags or tape. "In custody" also has a technical meaning: material counts as in custody only when it is in the actual physical possession of the authorized custodian in a secure location without access by unauthorized personnel. A sealed box in an unlocked corridor isn't in custody in the sense the record claims.

Receipt, Storage, and Documenting Every Transfer

Whoever takes the box starts the record. Regulatory operations manuals place that responsibility explicitly: the person receiving physical custody of the sample initiates the original record of sample receipt, and the designated sample custodian then logs custodial storage and each change of custody in the tracking system or LIMS.

Intake includes one verification step that's easy to skip and expensive to skip. Good clinical laboratory practice guidance calls for verification of the specimen container label information against the request form or log sheet, with any discrepancy resolved before processing begins. A label mismatch caught at intake is a five-minute conversation; caught after analysis, it's a data-integrity investigation.

Storage conditions are custody data, not a separate concern. GLP recordkeeping expects documentation that materials were held under appropriate conditions, with temperature, humidity, light exposure, and containment monitored and recorded rather than assumed. This is where custody paperwork and cold-chain transport records converge: an excursion nobody logged is both a stability problem and a gap in the custody narrative.

Shipment between facilities has its own documentation set. For every sample or portion shipped, the record captures what was provided and how much, how it was prepared for delivery, how it was identified and sealed, a brief explanation of why it was sent, to whom, and the date of shipment. Six fields, each closing a question an auditor would otherwise have to ask.

What GLP Actually Requires You to Write Down

Good Laboratory Practice turns custody practice into a standing records obligation — we cover that framework more fully in our overview of Good Laboratory Practice under 21 CFR Part 58. The regulations require facilities to document receipt, storage, handling, characterization, and use of test and control substances, and to maintain proper identification throughout the distribution process as required by 21 CFR 58.107. The stated purpose is blunt: these records are the audit trail that rules out mix-ups and cross-contamination. If identity can't be followed through distribution, a study's conclusions rest on assumption rather than record.

Characterization records under 21 CFR 58.105 go to the material's properties — identity, strength, purity, composition, and relevant physical or chemical characteristics — alongside analytical method validation, stability data, and impurity profiles. Raw data, in the GLP sense, is broader than most people expect: worksheets, records, memoranda, notes, instrument printouts, calibration records, photographs, and observations recorded at the time the work was done. All of it has to stay retrievable and attributable to a specific person at a specific time. Archives may be spread across more than one location, provided those locations are identified in the central archive and offer adequate storage conditions with authorized-access controls.

Audit Trails, Document Control, and Retention

The audit trail is the record of the record — who did what, when, and under which version of the procedure. Laboratories are expected to maintain an audit trail for every specimen from collection to disposal or storage, verifying the date and time each activity was performed and the personnel responsible. The practical test is reconstruction: given the file, could somebody rebuild the specimen's handling history without asking anyone to remember anything?

The record categories that support that reconstruction are enumerated in GCLP guidance — specimen tracking forms, laboratory requisitions, chain-of-custody documents, laboratory reports, equipment service and maintenance records, and instrument printouts. Document control belongs in the same bucket: a written plan, a master SOP list, a standardized authorization process, periodic review, and the withdrawal of retired procedures with clear obsolete marking. Otherwise you can trace the sample but not the procedure that governed it.

Retention windows are fixed by rule. Under GLP, records are kept for either two years after submission of a research or marketing permit, or five years after submission of study results in support of such a permit; retained specimens are held for the regulatory term or as long as their quality permits meaningful reevaluation, whichever is shorter. Sponsor agreements often sit above those floors, since a laboratory's retention period has to meet or exceed what the sponsor and any applicable regulator require.

Electronic Custody Records and the Integrity Problem

Software makes custody easier to log and, paradoxically, easier to doubt. A laboratory information management system offers fully automated control through containers with a unique code registered in the system, which then certifies the chain of custody using electronic signatures — removing whole categories of transcription error.

What the software has to earn is trust in the record it produces. GLP expectations for electronic records are that the system is validated, that unauthorized modification isn't possible, and that every entry is attributable to a named person and a timestamp. The reason is simple: digital material is inherently alterable — a photograph or text file is easily modified — which makes the audit trail, not the interface, the thing carrying the evidentiary weight.

Trusted timestamping and, more speculatively, blockchain anchoring are both proposed as ways to make that trail immutable. Worth watching, with one caveat: every technology used to protect information from alteration has known weaknesses, which is why layered controls remain the practice.

When the Chain Breaks — and What That Costs the Data

A gap in the record is a gap in what the data can support. The named failure modes are unglamorous: inadequate packaging, poorly sealed containers, loss or disappearance of an item, and contamination during initial handling. Add the paperwork failures — a missing signature, a transfer that happened but was never logged, an interval during which nobody can say who held the material.

The consequence isn't that the material becomes worthless. It's that the record can no longer establish authenticity and integrity, so adulteration and contamination can't be ruled out on paper. In the forensic setting the resulting evidence can be excluded outright. In the laboratory the effect is quieter and arguably more corrosive: the analytical result inherits the uncertainty of the custody gap, and so does every comparison built on top of it.

That's why custody matters for quality programs that look purely analytical. Batch-to-batch consistency testing assumes each batch's identity is documented well enough for the comparison to mean something. Where the custody record is thin, a real difference between batches and a mix-up between batches look identical in the data.

Frequently Asked Questions

What is a chain of custody form?

It's the single document that travels with a sample and records every hand it passes through. At minimum it carries the unique identification code, the collection location, the date and time, the collector's name and signature, any witness signature, and one dated, signed line for each transfer that follows. It isn't a receipt you file once — it's a running log, and its value comes from leaving no interval in the sample's history blank.

How long do laboratory records have to be kept?

Under the FDA's Good Laboratory Practice regulations, records are retained for either two years after a research or marketing permit is submitted, or five years after study results are submitted in support of such a permit. Retained specimens are kept for the regulatory term or as long as their quality permits meaningful reevaluation, whichever is shorter. Sponsor agreements often require longer, since a laboratory's retention window has to meet or exceed what the sponsor and any applicable regulator require.

Does an electronic system satisfy chain-of-custody requirements?

It can, and most modern laboratories use one. A laboratory information management system assigns each container a unique code, registers it, and certifies each transfer with an electronic signature. What the system has to add on top of convenience is integrity: the record must be validated, silent modification must be impossible, and every entry must be attributable to a specific person at a specific time. Digital files are easy to alter, so the audit trail is what makes an electronic custody record defensible.

What counts as a break in the chain of custody?

Any interval that can't be accounted for — a missing signature, a container found with a compromised seal, a period when a sample sat somewhere accessible to unauthorized personnel, or a transfer that was made but never logged. Once an interval is unaccounted for, the material's identity and integrity can no longer be established from the record, and the data generated from it inherits that uncertainty.

Is chain-of-custody recordkeeping the same as a certificate of analysis?

No — they answer different questions. A certificate of analysis reports what a laboratory measured: identity, purity, water content, residual solvents, and so on. A custody record establishes that the material measured is the same material that was collected, and that nobody unaccounted-for handled it in between. The certificate is only as meaningful as the custody record standing behind it, which is why the two are read together.

Reading the Paper Trail

Custody recordkeeping isn't adjacent to good data — it's the precondition for it. Purity figures and stability curves rest on an unstated claim that the material tested is the material in hand, and the custody record is the only place that claim is written down. If you're evaluating research-grade material, the documentation trail is as readable a signal as any number on the certificate: unique identifiers, intact seals, named custodians, no unexplained intervals. Electronic systems are making that trail easier to keep and its gaps easier to spot. The obligation hasn't changed.

For research use only. Not for human or animal consumption of any kind. The information in this article is for educational purposes only and is not intended to diagnose, treat, cure, or prevent any disease. The statements made have not been evaluated by the U.S. Food and Drug Administration. These products are NOT FDA APPROVED. Please consult with a licensed healthcare professional before making any decisions regarding your health or research.

Optides LLC is a chemical supplier. Optides LLC is not a compounding pharmacy or chemical compounding facility as defined under 503A of the Federal Food, Drug, and Cosmetic Act. Optides LLC is not an outsourcing facility as defined under 503B of the Federal Food, Drug, and Cosmetic Act.