How to Document Chain of Custody

Log where each exhibit came from, when you got it, and how you stored it — provenance is part of the evidence.

How to Document Chain of Custody
Key Takeaways
The methodLog where a file came from, when you got it, and how you stored it before you publish.
Why it mattersWithout custody notes, authentic-looking files become unverifiable screenshots.
On GnosisPut provenance in the pin notes; label credibility honestly if custody is weak.

Chain of custody sounds like a crime lab. For investigators it is simpler: can you say how this PDF got to you, and can you still find the original? Indie publishers lose arguments when the only copy is a compressed social screenshot with no hash, URL, or download timestamp.

Capture originals early

Download from the official portal when possible. Save WARC or full HTML for volatile pages if the claim depends on wording that might change. Note the URL and retrieval time in UTC.

For physical documents, photograph covers and page corners; keep a working copy and a read-only archive copy.

Log transfers

If a source handed you a drive, record when, from whom (even if the name stays private), and what you verified next. If you emailed a file to yourself, that is still a hop — note it.

Hashes (SHA-256) help when authenticity is contested. They do not prove the underlying events; they prove the bits did not change in your custody.

Separate working edits from archives

Never overwrite the archival file with redactions or annotated versions. Publish redactions copies as derivatives and say so.

When custody is incomplete, say so in the piece and on the pin. “Provided by a source; portal copy not yet located” is honest. Pretending you downloaded it from the agency is not.

Publish with enough trail to audit

Readers do not need your entire forensic notebook. They need a path: link to the public original when it exists, or a clear statement of limits when it does not.

On Gnosis, provenance notes travel with the pin so Premium board users and your future self see the same story.

Do this next on Gnosis

Use the free Investigator Starter Kit to put this method on one page, then open Gnosis and start the investigation. Premium unlocks the full Evidence Board on Pricing.

More Methods: Investigation Methods hub.

Digital specifics

Preserve metadata when tools allow. Be careful with messaging apps that strip metadata on forward. Prefer exporting from the original device or account when authenticity may be challenged.

Cloud links rot. Download. Name files with date and source code you understand six months later. A folder of IMG_3829 copies is how custody dies.

When publishing, offer the public original URL for government docs whenever it exists. Your hosted copy is a backup, not a replacement for the agency’s canonical file.

Keep a short private checklist for this method and revisit it on every story until it is automatic. Indie investigators do not have a newsroom hallway to catch slips, so the checklist is the hallway. When something feels inconvenient — downloading the portal PDF, writing the correction note, killing a tip — that inconvenience is usually the signal that the method is working. Readers will not see your discipline directly; they will feel it as fewer walk-backs and clearer exhibits.

Link back to the Investigation Methods hub when you publish so the next guide in the catalog is one click away. Practice on Gnosis with pins that match what you wrote here, and use the free Investigator Starter Kit when you need the one-page version of claim, sources, and first publish.

Sources

Comments