Chain of Custody for Environmental Labs: The Form Is Not the Requirement

What is a chain of custody form for?#

The claim, as it is usually stated: an unbroken, signed custody form on every sample is what makes environmental data defensible, and a gap in the signature chain is what an assessor writes up.

That is what most environmental analysts were trained on, and it is not a foolish position. It is a clean, teachable rule: one form, one signature per transfer, no gaps. It audits quickly. It survives staff turnover. For work that may end up in front of a judge it is also correct.

The trouble is that it describes a client requirement and a litigation practice, and a great deal of writing about environmental laboratories presents it as the accreditation standard. Those are different obligations with different triggers, and a laboratory that has satisfied the first can still fail the second.

What does the TNI standard actually require?#

The relevant clause opens conditionally. In the environmental laboratory standard published by The NELAC Institute, known throughout the sector as TNI, a legal chain of custody procedure is required if a customer requires legal chain of custody procedures and the laboratory accepts those samples. It is a conditional obligation attached to a category of work, not a blanket rule attached to every bottle.

What does apply to every sample sits in the receipt clauses: acceptance criteria for the condition a sample arrives in, indelible identification, a preservation check, a holding time check, a quantity check, and an unambiguous laboratory identifier that links collection date and time, receipt date and time, client and project, the field identifier, the analyses requested, and the person who received it.

Read those two side by side and the emphasis moves. The standard is not asking who signed. It is asking whether the record can be rebuilt.

What must a chain of custody record actually contain?#

Whether the custody is legal or routine, the record is built from the same fields, and the ones that fail assessment are rarely the signatures. They are the times.

Two rows do most of the damage. Collection time, because everything downstream is measured from it; and receipt condition, because it is the acceptance decision the standard requires and the one most often recorded as a tick rather than a temperature. Sample tracking that assigns the laboratory identifier at receipt and carries the collection time forward is what turns this table into one record rather than three documents.

Why does an assessor care about reconstruction rather than signatures?#

Because that is what the findings data shows they cite. In an institute review, assessors from three state programmes put control of records among the most common on-site findings, and made a point that is easy to miss: most of those findings did not affect the data that was generated. They meant the laboratory could not produce objective evidence that the activity had occurred.

The clause-level examples are ordinary bench work, not paperwork theatre. The original incubator temperature and the corrected value after thermometer correction both have to be recorded, because the derived number without its source cannot be checked. Standard and reagent origin, receipt and preparation have to sit with the run that used them. The equipment used in the analytical testing has to be identified, so the run can be rebuilt rather than merely believed. An audit trail that keeps the prior value is what makes the first of those possible.

Custody itself is defined more tightly than most laboratories assume. A sample is under custody if it is in your physical possession, within your view, or in a defined secured storage location. “In the laboratory” is not a defined secured storage location. That single point catches more laboratories than a missing signature ever has, because the building feels like custody and does not meet the test. The same discipline runs through how an environmental monitoring lab handles a sample from collection onward.

Why did the form become the requirement, and what is it still right about?#

The form hardened into the requirement for two good reasons. For evidentiary and litigation work it genuinely is the requirement, and a client who specifies legal custody is entitled to exactly the unbroken signed chain the folklore describes. Nothing here changes that, and if your samples may be produced in court you should treat the full chain as mandatory regardless of what the accreditation clause says.

The second reason is that a signature is checkable in seconds and reconstructability is not. You can audit a form across a bench in an afternoon. Auditing whether a named result can be rebuilt from its reagent lots and instrument records takes a morning per sample. The simplification is what a busy quality manager can enforce, which is why it spread.

It is also worth knowing that “chain of custody” names five different objects depending on which doorway the sample came through. When a vendor offers you a chain of custody module, ask which of the five it built.

Only the second of those is what an environmental accreditation assessor is testing on routine work, and it is the one most often treated as a formality. An environmental testing programme that gets the field document right has covered more ground than one with immaculate signatures and a vague collection time.

How does software improve chain of custody documentation, and where does it stop?#

The honest answer is narrower than the pitch and more useful. Software improves chain of custody documentation in exactly three ways, and it changes what you should refuse to pay for.

It assigns one identifier at receipt and carries it through every aliquot, so the field identifier, the laboratory number and the report can be walked back to each other without a person’s lookup. It records each transfer as an event with the two parties and a timestamp, rather than as initials on a form, so a gap is visible the moment it occurs rather than at audit. And it holds the receipt checks as data — temperature, preservation, holding time against collection time — so the acceptance decision is a record rather than a tick. The narrow, defensible claim is reconstruction speed: everything behind a named result, inside the hour an assessor asks for it.

What it does not do is make you compliant. An electronic chain of custody module sold to you as a TNI mandate is being sold against a requirement that is conditional, and if the pitch cannot tell you which clause it satisfies, the pitch has not read the clause. Most of what assessors cite across the ISO/IEC 17025 world is quality system work that software supports and cannot perform: management review inputs, risk identification, competence records, and reference standards that were not calibrated.

And the manipulation that makes a result untrue usually happens upstream of any laboratory system. The EPA Inspector General warned the environmental laboratory community in 2001 about improper manual integrations used to make control samples appear to meet quality control requirements, and the remedy recommended was management spot-checking a percentage of integrations, not a system. A clean audit trail can sit on top of a falsified number. An environmental LIMS holds the custody record; it cannot see what the chromatography software did before the number arrived.

What a LIMS carries in this work#

The reconstructable record, for one named sample: the collection time the clock started from, the receipt checks as data against the standard’s acceptance criteria, each transfer as a timestamped event, the reagent lots and the instrument identity attached to the run, and one identifier holding all of it together. It carries the legal chain where a client has asked for one, and the routine record the standard requires whether or not anyone asked.