Unit-level history
Every pack, lot or part carries one ordered history from commissioning to dispense or installation.
CHAIN OF CUSTODY / EVERY HANDOFF MATTERSKnow where
Know where
it’s been.
Trust what’s next.
One product. Many organizations.
A connected history from origin to destination.
Track medicine and critical goods through attested handoffs. Share provenance while protecting commercial terms.
Trace the journey Designed first for pharmaceutical supply chains
PRODUCT PASSPORTSAMPLE LOT
LOTRX–2026–0842Origin recorded
AT THE ORIGIN
The manufacturer creates the serial record. Each later handoff adds an attested link to this product’s history.
Unit-level history Two-sided transfers Recall visibility Private commercial terms
How it works
Two signatures per hand-off. One record for the whole chain.
Commission serial numbers
The manufacturer registers each pack or lot and attests to its origin. From that moment the unit has one history that everyone agrees on.
Hand off with two attestations
Every transfer must be attested by both sender and receiver. Price, quantity and terms are kept in a private collection shared only by those two partners and, where required, the regulator.
Attach cold-chain evidence
The logistics provider attests the temperature record for each shipment. Its fingerprint is tied to the custody event so it cannot be swapped later.
Verify at the point of dispense
A pharmacy checks the pack before handing it to a patient: is it authentic, is it recalled, has it already been dispensed somewhere else?
Recall in one step
The manufacturer or regulator flags a lot. Every later verification of an affected pack is refused across the whole network.
Features
Traceability that partners are willing to join.
Attested hand-offs
Both sides of every transfer sign it, so custody gaps and one-sided claims stand out immediately.
Private commercial terms
Prices and quantities live only in collections shared by the trading pair and any declared regulator.
Network-wide recalls
A recall is a single attested event that every verification respects immediately.
Temperature evidence
Logger records are attested by the carrier and bound to the shipment they describe.
Regulator access by design
Regulators join as members of the collections they are entitled to inspect. That membership is public, so nothing is watched in secret.
Who sees what
Traceable for safety. Opaque to rivals.
Collection membership and attestation metadata are visible. Private payload access depends on the organizations declared in each collection.
| Information | Trading partners | Regulator | Other companies | Validators |
|---|---|---|---|---|
| Prices, quantities and terms | Yes | Where declared a member | No | No |
| Custody details of a transfer | Yes | Where declared a member | No | No |
| Pack status at verification | Yes | Yes | When verifying that pack | No |
| Recall notices | Yes | Yes | Yes | Yes |
| That each hand-off was attested by both sides | Yes | Yes | Yes | Yes |
The ledger verifies recorded claims and attestations. Physical authenticity and sensor accuracy still depend on the organizations and devices supplying the evidence.
Custody policies
No one can rewrite a hand-off alone.
Each action in the supply chain has an attestation policy committed to the ledger. Validators enforce it without ever seeing the commercial data behind the transfer.
- A transfer needs both the sender and the receiver, so custody cannot be claimed one-sidedly.
- A recall can come from the manufacturer or the regulator, so safety never waits on one party.
policy: transfer_custody v1
- And
- Sending Partner
- Receiving Partner
- Or
- Manufacturer
- Medicines Regulator
The problem
Regulators want full traceability. Competitors want your data.
Rules such as the US Drug Supply Chain Security Act and the EU Falsified Medicines Directive require pack-level tracking. But the partners who must share that data also compete with each other.
Central hubs see everything
Pooling data in one platform exposes volumes, prices and customer lists to the operator, and sometimes to rivals.
Counterfeits slip through gaps
When each company keeps its own records, a diverted or fake pack can re-enter the chain where no one is comparing notes.
Recalls move slowly
Finding every affected unit means requests to each distributor, spreadsheets and days of uncertainty for patients.
Temperature proof is paper
Cold-chain logs are PDFs attached to emails. Proving a pack stayed in range is hard after the fact.
Who it is for
From the factory floor to the pharmacy counter.
Manufacturer
Compliance and brand protection without exposing distribution deals.
Wholesaler
Meet traceability rules without handing volumes to competitors.
Pharmacist
Authenticity, recall and duplicate-dispense status in one answer.
Regulator
Declared access to the records you are entitled to, with full history.
Questions
What supply chains ask first.
Can a competing distributor see my volumes or customers?
Commercial details of a transfer are stored only in the collection shared by the two trading partners and any regulator declared as a member. Other companies can inspect membership and attestation metadata, but do not receive private prices, quantities or transfer documents.
Does the regulator see everything?
Only the collections it is a declared member of. Membership lists are public on the ledger, so every company knows exactly what the regulator can inspect.
Can we connect our existing serialization systems?
Yes. ChainOfCustody is designed to take events from existing serialization and warehouse systems through APIs, so staff keep using the tools they know.
What if a partner refuses to attest a transfer?
The transfer is not complete until both sides attest. An unconfirmed hand-off is visible to the partners involved as an open item, which is exactly the gap traceability rules want surfaced.
Is it only for medicines?
Pharmaceuticals are the first focus because the rules are strict and the stakes are high. The same model fits medical devices, aircraft parts, food safety and battery passports.
ONE PROTOCOL. SHARED POSSIBILITIES.Understand the workflow.
Understand the workflow.
See the bigger picture.
Qkite is in active development with design partners.
Explore the protocol and the other applications built on it.