Chain of Custody:
What It Requires, Where
It Breaks, and How to
Read the Record
Chain of custody is not a formality. It is the documented proof that a piece of evidence is what someone claims it is — that it hasn’t been altered, substituted, contaminated, or tampered with between the moment it was collected and the moment it’s presented in court. When that chain breaks, everything built on top of it is suspect. Most people don’t know how to spot a broken chain. Here’s how.
There is a particular kind of confidence that comes with presenting physical evidence. It feels concrete in a way that testimony doesn’t. It doesn’t misremember. It doesn’t have an agenda. It just sits there, in its evidence bag, tagged and labeled, and the jury looks at it and thinks: that’s real. That’s the thing that was there.
What the jury doesn’t always understand — and what defense counsel doesn’t always press hard enough, and what parties in civil proceedings rarely interrogate at all — is that the thing in the bag being real is only half the question. The other half is whether you can prove it’s the same thing that was collected, that nobody touched it who shouldn’t have, that it was stored properly, that every person who had it signed for it, and that the documentation of all that holds up under examination.
That is chain of custody. It is the documented, verifiable record of evidence handling from collection to courtroom. When it’s intact, it supports the inference that the evidence is authentic and unaltered. When it has gaps — and it often does — the question is whether those gaps matter, and who gets to decide.
Chain of custody is a foundation, not a technicality. A broken chain doesn’t automatically exclude evidence, but it opens the door to authenticity challenges, weight arguments, and — in the right circumstances — exclusion. The record tells you which door you’re standing in front of. Most people never read the record carefully enough to find it.
What Chain of Custody Actually Means
Chain of custody is the chronological documentation — usually a log, a form, or a series of signed receipts — showing every person who had possession of a piece of evidence, when they had it, what they did with it, and where it was stored. The purpose is to establish that the evidence presented in court is the same evidence that was collected, in substantially the same condition, without unauthorized interference.
The concept applies across contexts. Criminal prosecutions, civil litigation, administrative proceedings, internal investigations, family court matters, regulatory enforcement actions — anywhere evidence is collected, handled, and later presented, chain of custody is the framework that makes that evidence usable. The stakes vary. The standards vary. But the underlying question is always the same: can you account for this thing from the moment it was seized until right now?
The documented, unbroken sequence of possession, transfer, analysis, and storage of evidence, sufficient to show that the evidence presented is the same evidence collected, has not been materially altered, and was handled in a manner that preserves its integrity and admissibility.
The chain is only as strong as its documentation. Every link is a person — a collecting officer, a lab technician, an evidence room custodian, a transporting deputy, an expert who analyzed the sample. Each of those people should have signed in and signed out. Each transfer should be recorded. Each storage period should be logged. In practice, this often doesn’t happen as cleanly as it should, and the resulting gaps are where authenticity arguments live.
It is important to distinguish chain of custody from the related concept of evidence preservation. Preservation is about what happens to the evidence physically — proper storage conditions, temperature controls for biological samples, protection from contamination, maintenance of digital integrity for electronic evidence. Chain of custody is the paper trail that documents all of that. You can have perfect preservation with terrible documentation, or meticulous documentation of sloppy handling. Neither serves you well.
02 · The LinksWhat a Complete Chain Looks Like
A properly maintained chain of custody moves evidence through a predictable set of stages. Each stage is a link. A missing link doesn’t always mean the evidence is inadmissible — courts are not that strict — but it creates an opportunity for challenge, and in a case that turns on the physical evidence, that opportunity can be decisive.
The evidence is identified, photographed in place, collected, and packaged. The collecting officer or agent fills out an initial evidence tag: what it is, where it was found, when, by whom. The item is sealed, usually initialed across the seal. Any deviation from this process — collection without packaging, unsealed containers, missing documentation of the collection location — is the first potential break.
The evidence moves from the collecting officer to the evidence room, a lab, or an interim custodian. This transfer should be logged: who handed it over, who received it, the time, the condition of the packaging. If it went through an intermediary — a second officer transported it, a courier moved it between facilities — that leg needs documentation too. Undocumented transfers are the most common chain break in routine criminal cases.
The evidence sits in a controlled environment: locked, climate-controlled where required, access-logged. Every time someone pulls the item from storage — for analysis, for review by counsel, for a court date — there should be a log entry. Who checked it out, when, why, and when they returned it. Evidence rooms that don’t maintain access logs are a structural chain of custody problem in every case that passes through them.
When evidence goes to a forensic lab or expert for analysis — DNA, fingerprints, toxicology, digital forensics, document examination — the receiving lab must document receipt, the analyst who handled it, the methods used, and return of the item or sample. Lab internal chain of custody is its own sub-chain and is frequently where challenges to forensic evidence land. A lab that cannot produce its internal handling logs is a lab whose results are vulnerable.
The evidence arrives at trial. The proponent must authenticate it — establish through testimony or documentation that this item is what it’s claimed to be. A witness, usually the collecting officer or a custodian, testifies to the chain. If there are gaps, this is where opposing counsel raises them, either through cross-examination or a motion in limine challenging admissibility before trial begins.
Admissibility vs. Weight: The Line Courts Draw
The most important thing to understand about chain of custody and the law is this: a broken chain does not automatically mean the evidence comes out. Courts in most jurisdictions — including Michigan — do not require a perfect, unbroken chain as a prerequisite for admissibility. What they require is sufficient foundation to support the inference that the evidence is what it’s claimed to be.
The federal framework under Rule 901 of the Federal Rules of Evidence sets the standard for authentication: the proponent must produce evidence “sufficient to support a finding that the item is what the proponent claims it is.” That is not a high bar. It does not require eliminating all possibility of tampering. It requires enough — and “enough” is determined by the trial judge.
“To satisfy the requirement of authenticating or identifying an item of evidence, the proponent must produce evidence sufficient to support a finding that the item is what the proponent claims it is.”
Once evidence is admitted, chain of custody defects go to weight, not admissibility. That distinction is significant. Weight is for the jury — or the factfinder in a bench trial. If opposing counsel has successfully established that the evidence log has an unexplained 72-hour gap, the jury hears that argument and decides how much to credit the evidence. In a case that turns entirely on that evidence, the weight argument can be as powerful as exclusion. But it requires making the argument, which requires reading the underlying documentation, which most parties never do.
The threshold for exclusion on chain of custody grounds is higher: usually, a showing that the break in the chain raises a genuine question about the identity or integrity of the specific item — not just that someone might have had access to it, but that the access creates real doubt about what was done. Courts are reluctant to exclude, particularly in criminal cases where the physical evidence is central. The cleaner play is often the weight argument, pushed hard in front of the jury with the actual documentation in hand.
Admissibility is the judge’s call. Weight is the jury’s call. A chain of custody argument that doesn’t rise to exclusion can still win the case — if the factfinder hears clearly that nobody can account for where the evidence was for three days, that the evidence room log shows unauthorized access, that the seal was broken before it reached the lab. The argument only works if you’ve read the records. Most people haven’t read the records.
The Break Patterns Worth Recognizing
Chain of custody breaks in predictable ways. Some are structural — the result of agencies that don’t maintain adequate systems. Some are case-specific — the result of particular handling failures in a particular investigation. Both matter. Here are the patterns that come up most often.
Evidence moves from one person or location to another without a corresponding log entry. No signature. No timestamp. No record of who transported it or why. The documentation shows it was collected on Tuesday and received at the lab on Friday, with nothing in between. What happened during those three days is officially unknown.
Evidence arrives at a downstream link — the lab, the evidence room, the courtroom — with packaging that shows signs of having been opened and resealed, or with no seal at all. The initialed tape is cut or missing. The bag has been reopened. This is a physical break that the documentation may not reflect, which makes it more insidious than a paperwork gap alone.
The evidence room log shows access by persons not involved in the case, access at unusual hours, missing entries for periods when the evidence was known to have been removed, or no log at all. Systematic access log failures affect every case that moved through that facility during the affected period — not just the one being litigated.
The lab’s internal handling documentation doesn’t account for who analyzed the sample, whether the analyst followed protocol, whether the sample was subdivided and whether all subdivisions are accounted for, or whether the analysis consumed the entire sample leaving nothing for independent testing. Each of these is a discrete challenge point.
One of the links in the chain — a collecting officer, a transport deputy, a lab technician — is unavailable to testify. The proponent tries to paper over the gap with testimony from someone who didn’t handle the evidence directly but can speak to the general procedures. Courts sometimes allow this. But it is not the same as the person who actually touched the item accounting for what they did with it.
Digital evidence — phones, hard drives, server logs, surveillance footage — has its own chain requirements, including hash value verification to confirm files haven’t been altered. If the digital forensics report doesn’t include hash values taken at collection and again at analysis, the integrity of the digital evidence has not been established, regardless of what the analysis found.
When a chain of custody failure is systemic — an evidence room that has never maintained proper logs, a lab that doesn’t document internal transfers — it potentially affects every case that passed through that system. This is worth knowing if you are investigating a pattern of misconduct rather than a single case. The failure in your case may be the same failure that affected fifty others. That is a different kind of argument than a single-case documentation gap.
The Court Records Toolkit explains every docket entry type, how to access Michigan and federal court records, and how to spot procedural anomalies without a law degree. The Spot the Gap Checklist applies the same method to evidence chain analysis.
How Chain of Custody Gets Misused — Both Directions
Chain of custody arguments get weaponized in both directions, and both forms of misuse are worth understanding.
The first direction is suppression by volume. A party buries the other side — usually a pro se litigant or an underfunded defense — in chain of custody objections that have no real merit. Minor paperwork irregularities get inflated into arguments that the entire evidentiary record is tainted. The goal is not to win the argument. The goal is to consume time, create confusion, and make the proceeding feel unmanageable. If opposing counsel doesn’t know how to respond, the tactic works.
The second direction is more common and more dangerous: ignoring real chain of custody problems because raising them is inconvenient. Defense counsel who hasn’t read the lab’s internal handling logs can’t raise the argument that those logs are missing. Prosecutors who haven’t actually tracked the evidence room access records can’t see that someone without case authorization pulled the evidence bag three weeks before trial. Civil litigants who don’t know to ask for chain of custody documentation in discovery never get it. The failure is one of investigation, not law — and it systematically advantages the party with more resources to investigate.
Chain of custody documentation — evidence room logs, lab handling records, transport receipts — is generally obtainable through discovery requests, public records requests, or subpoena. The problem is that most parties don’t know to ask for all of it, and the producing party has no incentive to volunteer documentation that creates problems for their own case. You have to know what to ask for. This explainer is part of knowing what to ask for.
There is also a prosecutorial version of this problem in criminal cases. Evidence that is exculpatory — that tends to undermine the government’s case or support the defendant — must be disclosed under Brady v. Maryland. Evidence that is physically degraded or lost due to poor chain of custody practices may implicate the related doctrine of Arizona v. Youngblood, which addresses the destruction or loss of potentially useful evidence by the government. These are distinct doctrines with different standards, and chain of custody failures sometimes implicate both.
“Unless a criminal defendant can show bad faith on the part of the police, failure to preserve potentially useful evidence does not constitute a denial of due process of law.”
The bad faith requirement in Youngblood is where chain of custody documentation becomes evidence of a different kind. A single loss of evidence could be negligence. A pattern of losses, a failure to maintain required logs, a break in the chain that happened to eliminate exculpatory material — these start to look like something other than accident. Proving bad faith is difficult, but the documentation — or the conspicuous absence of it — is where that proof lives.
06 · Digital EvidenceThe Digital Chain: A Separate and Harder Problem
Digital evidence has its own chain of custody requirements that go beyond paper logs, and most people litigating cases involving phones, computers, surveillance footage, or electronic records don’t understand what those requirements actually are.
The foundational requirement for digital evidence integrity is hash verification. A hash value is a mathematical fingerprint — a fixed-length string generated by running a file through a cryptographic algorithm. If the file is altered in any way, even by a single bit, the hash value changes. Proper digital forensic practice requires generating a hash of the original evidence at the moment of collection, maintaining a verified copy, and confirming that the hash of the copy matches the original before analysis begins.
A cryptographic checksum (typically MD5 or SHA-256) generated from a digital file or storage device at the time of collection and again at the time of analysis. A match between the two values confirms that the digital content has not been altered. A forensic report that does not include hash values has not established the integrity of the digital evidence it describes.
This matters because digital evidence is uniquely vulnerable to alteration without visible physical trace. You can see a broken seal on an evidence bag. You cannot see — without hash verification — whether a digital file has been modified. Courts are increasingly aware of this, and forensic experts who cannot produce hash verification as part of their methodology are subject to Daubert challenges in federal court and the analogous standard in Michigan state court under People v. Dobek and its progeny.
| Evidence Type | Physical Chain Requirements | Digital / Additional Requirements |
|---|---|---|
| Physical objects | Tagged, sealed, signed at each transfer, evidence room log | N/A — standard chain applies |
| Biological samples | Above, plus temperature and contamination controls, analyst log | Sample subdivision documentation, quantity tracking |
| Electronic devices | Seizure log, Faraday bag or airplane mode to prevent remote wipe | Hash value at collection, forensic image verification, write-blocker use documented |
| Digital files | Source documentation — where the file came from, who produced it | Hash value, metadata preservation, no alteration of original |
| Surveillance footage | Custodian authentication, footage request log, unedited copy confirmed | Hash verification if digital, timestamp verification, gap identification |
| Lab samples | Receipt log, analyst assignment, return or disposal documentation | Internal lab chain, method documentation, proficiency testing records for analyst |
Surveillance footage deserves particular attention. In cases involving recorded events — police encounters, commercial disputes, incident documentation — the question of whether the footage is complete is as important as whether it is authentic. Footage that has been edited, trimmed, or from which a segment is missing is a chain of custody problem even if every transfer was properly documented. The chain must account for the integrity of the content, not just the integrity of the medium.
07 · Michigan SpecificsHow Michigan Courts Handle Chain of Custody Challenges
Michigan courts apply a foundation-based admissibility standard for chain of custody that substantially tracks the federal approach: the proponent must lay a sufficient foundation to support a reasonable inference that the evidence is what it’s claimed to be. A broken chain goes to weight, not automatic exclusion, unless the break creates a genuine question about identity or integrity that cannot be resolved.
Michigan Rule of Evidence 901 mirrors Federal Rule 901 in its authentication requirements. For physical evidence, Michigan courts have consistently held that minor gaps in the chain of custody — a missing signature, an undocumented brief transfer between officers at the scene — do not by themselves require exclusion. The proponent must simply establish the foundation; the opponent can then argue weight.
Where Michigan has developed some distinct case law is in the context of lost or destroyed evidence and the standard for obtaining sanctions. Michigan courts have recognized that some circumstances of evidence loss warrant a jury instruction — a so-called “missing evidence” or spoliation instruction — even absent the federal bad faith standard, where the loss results from gross negligence or a failure to follow required preservation procedures. This is a meaningful difference from the federal Youngblood framework and is worth knowing if you are litigating evidence loss in a Michigan state court.
Michigan’s forensic lab system has also been the subject of documented scandal involving chain of custody failures in the state police crime labs — most significantly in the Bode Technology audit of the Michigan State Police Forensic Science Division and various DPD lab closures. These are not abstract policy matters. If your case involved evidence processed through an affected lab during an affected period, you have a concrete chain of custody argument that connects to a documented systemic failure. Pull the audit records. Pull the dates. Match them to your case.
The Detroit Police Department crime lab was shut down in 2008 following audits revealing systemic failures including evidence handling problems. The Michigan State Police Forensic Science Division has faced periodic scrutiny. If your case involves forensic evidence from a Detroit-area lab in the 2003–2009 window, chain of custody and lab integrity issues are not hypothetical. They are documented and litigated. Ask for the audit records as part of your investigation.
In civil litigation in Michigan, chain of custody for documentary evidence — business records, electronic communications, personnel files — is addressed through the authentication and best evidence rules. MRE 1001-1004 governs originals and duplicates. When a party produces a document that is allegedly a copy, the question of whether it is a true and accurate copy, and what happened to the original, is a chain of custody question in functional terms even if the doctrine is framed differently. The investigation is the same: account for the document from source to courtroom.
08 · Reading the RecordHow to Investigate a Chain of Custody in a Real Case
If you are analyzing a case — your own litigation, an investigation you’re conducting, or a case record you’re reviewing — here is the practical framework for chain of custody investigation. This is a document-reading exercise as much as a legal one.
Start by identifying every piece of physical or digital evidence that matters to the case. List them. For each item, you are trying to reconstruct the chain from collection to court. The documentation for this lives in the following records, each of which is obtainable through discovery, public records requests, or subpoena depending on the context.
Once you have the documentation, lay out a timeline. Put every documented event in chronological order. Then identify what’s missing. The gaps in the timeline are your arguments — whether for admissibility, weight, or spoliation sanctions depending on what the gaps reveal and what the applicable standard requires.
Compare the documentation against the testimony. If a witness testifies that they transferred the evidence to the lab on Monday morning, and the lab intake log shows receipt on Wednesday afternoon, someone is wrong. That discrepancy is not a footnote. It is the argument. Get the actual documents and the actual testimony in front of each other, and the argument builds itself.
Chain of custody documentation is not the kind of thing that gets voluntarily produced in its entirety by the party whose interest is in keeping it quiet. You have to ask for all of it — the access logs, the intake forms, the lab’s internal handling records, the digital acquisition documentation. Ask for everything and expect to get less than everything. What you don’t get is also information. A party that stonewalls a legitimate chain of custody documentation request is a party that has something in that documentation worth hiding.
Using Chain of Custody Without a Law Degree
You do not need to be a lawyer to investigate a chain of custody problem. You need to be systematic, you need to read the actual documents, and you need to know what you’re looking for well enough to recognize when it’s missing.
The legal argument — whether something is admissible, whether a weight instruction is warranted, whether a spoliation sanction is available — is the last step, not the first. The first step is the investigation. Build the timeline. Identify the gaps. Get the documents that should exist and note the ones that don’t. By the time you bring a chain of custody challenge, you should be able to point to a specific log entry that’s missing, a specific timestamp that doesn’t align, a specific transfer that nobody signed for. Vague assertions that the chain “might” have been broken will not get you far. Specific documented gaps in specific documents will.
Chain of custody is also worth understanding for what it reveals about an agency or institution apart from any specific case. An evidence room that has never maintained proper logs is not a problem that appeared in your case and disappeared after. It is a systemic failure that exists across every case that passed through that room. A lab that doesn’t document internal evidence handling has a problem that predates and postdates your matter. The documentation you pull for your case may be the documentation that establishes a pattern — and that pattern may matter for reasons that extend well beyond what’s in front of you right now.
The record exists. In most cases, it’s obtainable. The question is whether anyone bothered to get it, read it carefully, and follow what it shows. Most of the time, the answer is no. That is the gap this kind of investigation fills.
Continue Your Investigation
If this reporting raised more questions, use the Clutch Justice ecosystem to keep going.
