By Paul Bakhtiar, MBA, Founder of Helios Consultants

Short answer. Chain of custody is the documented, unbroken record of who made, tested, held, shipped and received a peptide lot, with dates, quantities and lot numbers at every handoff. In professional sourcing it runs from the original manufacturer’s batch record through every distributor to the clinic’s receiving log. Any link that cannot be produced on request means the lot’s identity rests on trust, not records.

What this means for your clinic. Before you rely on a certificate, ask who has held the lot since it was made and what record each of them can produce. Then write your own link the day the box arrives: who received it, when, how many vials, at what temperature and under which lot number.

Who are the links in the chain?

A peptide lot passes through five hands on its way to you: the manufacturer, the testing lab, the distributor, the carrier and the clinic. Chain of custody is the set of records those five leave behind, joined by one lot number. So the clinic’s guide to verifying peptides reads a certificate as one link in that chain, not the chain itself.

The manufacturer’s link is the deepest. Its batch record documents how the lot was made; the certificate only summarizes the tests. What Is a Batch Record, and How Is It Different From a COA? explains the difference, and every later link should point back to the batch number that record created.

What must each link be able to hand over?

ICH Q7, section 17.20, is the clearest list. Agents, brokers, traders, distributors, repackers and relabelers keep complete traceability for every lot they handle, and the records are: the identity and address of the original manufacturer, purchase orders, bills of lading, receipt documents, the name or designation of the material, the manufacturer’s batch number, transportation and distribution records, all authentic certificates of analysis including the original manufacturer’s, and the retest or expiry date.

ICH Q7 is written for makers and distributors of active pharmaceutical ingredients; the series cites it as the benchmark a legitimate supplier meets.

Sections 17.60 to 17.63 cover what moves along the chain with the lot. Quality information from the manufacturer is passed on to the customer, and the customer’s information back to the manufacturer (17.60). The supplier gives the customer the original manufacturer’s name and the batch numbers supplied (17.61), and any certificate it issues follows the section 11.4 rules (17.63).

That is also your request list: the original manufacturer’s name and address, the batch number, the purchase and shipping paper for your lot, and every certificate the lot has carried. A supplier that can produce it has a chain; one that can produce only its own certificate has a document.

What does the US prescription-drug model look like, and why does it matter here?

Finished prescription drugs in the US move under a written traceability model, and 21 U.S.C. 360eee defines its pieces. Transaction information names the product and its strength, the container size and count, the lot number, the dates, and the seller’s and buyer’s names and addresses. The transaction history is that information for every prior sale back to the manufacturer; the transaction statement is the seller’s written attestation about how it received and handled the product.

The product identifier puts the lot number, the expiration date and a unique serial number on each package in human-readable and machine-readable form. Under 21 U.S.C. 360eee-1, trading partners keep those records for not less than six years after the transaction.

DSCSA covers finished prescription drugs in the licensed US supply chain, not most peptide products, so it is cited here as the traceability model, not as a clinic obligation. FDA’s product tracing FAQ frames the scope the same way: finished prescription drugs moving between trading partners. Because most peptide products sit outside that model, the chain doesn’t come with the product by default; it exists when the supplier builds it and you ask for it. What Is a Quality Agreement, and What Should a Clinic’s Supplier Put in Writing? is where that ask becomes a signed commitment.

What a clinic borrows is the habit: a record at every change of hands, kept for years, and a package that names its own lot and expiry.

How does Helios document the chain?

Under the standard, the chain of custody log (EV-04) is kept per shipment. It records the handoffs the clinic can document: lot number, quantity, ship date and arrival date.

Then come the step 5 fields taken on receipt: package condition, seals, temperature on arrival, logger or indicator status and time in transit. Later verification entries go on the same page, each dated and initialed.

WHO’s storage and distribution guideline lists the same core for any receipt record: date, product, quantity, supplier, batch number and expiry date (TRS 1025, Annex 7, section 17.10). The log’s receipt line carries those six fields.

Steps 1 and 2 supply the upstream links: the supplier file names the original manufacturer and the testing lab, and the certificate set holds both documents for the lot. Together, the three records let a reader start at the vial and walk back to the batch number.

What is the clinic’s part of the chain?

The clinic is the last custodian, and its link is the one nobody else can write. Three records make it. The receiving log carries date, product, quantity, supplier, lot number, expiry and the condition and temperature on arrival.

The label photo ties the vial to the lot number in the log, and the verification note records that the certificate and the lab’s record were matched to that lot. What Records Should a Clinic Keep for Each Peptide Shipment? sets out the full file.

Custody doesn’t end at receiving. Inside the clinic, the lot moves from quarantine to released stock and out again, and each move is a handoff with a date and a quantity. The last entry links the lot number to the charts of the people who received it, so a recall notice is answered from records, not memory. How Do You Link a Peptide Lot Number to the Patients Who Received It? covers that record.

How Helios does it

Under the Helios verification standard, step 1, supplier qualification, identifies the original manufacturer and the testing lab in writing before the first order; the record is the supplier file (EV-06). Step 2 requires the manufacturer’s COA and an independent laboratory report for the exact lot before shipment; the record is the COA set (EV-14). Step 5, receiving inspection, records condition, seals, temperature on arrival, logger or indicator status and time in transit; the records are the receiving record (EV-05) and the chain of custody log (EV-04). Helios Consultants LLC describes all seven steps in how Helios verifies every lot. If you want help setting this up in your clinic, book a consultation.

Related questions

What Records Should a Clinic Keep for Each Peptide Shipment?

What Is a Batch Record, and How Is It Different From a COA?

How Do You Link a Peptide Lot Number to the Patients Who Received It?

What Is a Quality Agreement, and What Should a Clinic’s Supplier Put in Writing?

Sources

ICH Q7, Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, sections 17.20 and 17.60 to 17.63. View source

21 U.S.C. 360eee, Definitions. Legal Information Institute. View source

21 U.S.C. 360eee-1, Requirements. Legal Information Institute. View source

FDA, Drug Supply Chain Security Act Product Tracing Requirements: Frequently Asked Questions. View source

WHO Technical Report Series 1025, Annex 7, Good storage and distribution practices for medical products (2020). WHO. View source

Educational content for licensed professionals. Not legal or medical advice. No product is offered for sale on this page.