Chain of Custody for Shipped Drives

When a customer ships a failed drive to a data recovery lab, the drive passes through multiple handling stages: packaging, carrier transport, intake, diagnosis, recovery work, data transfer, and return shipping. Each stage introduces physical risks (shock, vibration, static discharge, temperature extremes) and requires documentation to maintain a verifiable chain of custody. This article covers the practical requirements at each stage and explains why proper handling matters for recovery outcomes.

Packaging Requirements for Shipping a Failed Drive

A failed hard drive is more vulnerable to shipping damage than a working drive. Drives with degraded heads may have heads resting on the platter surface (stiction). Drives with loose internal components (broken head arm, dislodged filter) can sustain additional damage from vibration and impact during transit. Proper packaging minimizes these risks.

HDD-Specific Shipping Requirements

A mechanical hard drive is a precision device with read/write heads that fly 3 to 5 nanometers above spinning platters at 5,400 to 7,200 RPM. A drive that is already failing, clicking, or has experienced a head crash is structurally more fragile than a healthy drive. Generic cushioning and a soft mailer are not adequate. The goal of packaging is to isolate the drive from the carrier's vibration and drop environment so that the patient arrives in the same state it left.

• Metalized shielding bag preferred over pink poly. Pink poly bags dissipate static; metalized shielding bags both dissipate static and block external electrostatic fields. For a suspected PCB failure, use a shielding bag.
• Rigid closed-cell foam or 2 plus inches of bubble wrap on all six sides. Packing peanuts settle in transit and leave dead zones at the top of the box. Loose fill alone is not acceptable.
• Double-box for drives suspected of stiction or head-stack damage. Drop the cushioned inner box into a second outer box with 2 plus inches of foam around the inner box. This isolates the drive from sustained conveyor vibration, which worsens stiction and can walk a detached head across the platter surface.
• Include a desiccant pack for humid-climate transit. Condensation on an internal filter or PCB creates additional failure modes during the intake spin-up test.
• Never ship a drive in its original retail clamshell or a plastic hard case alone. Hard cases transmit shock directly to the drive body. Cushioning must be between the hard case and the outer box.

Intake Documentation and Labeling

When a drive arrives at the lab, intake documentation creates the formal chain of custody record. The intake process typically includes:

1. Package condition inspection. Note any visible damage to the shipping box (crushed corners, wet spots, punctures). If the package is damaged, photograph it before opening. This documentation is relevant if an insurance claim is needed.
2. Drive identification. Record the drive's manufacturer, model number, serial number, firmware revision, and capacity from the drive label. Photograph the label. This information uniquely identifies the drive and prevents mix-ups in a lab handling multiple cases simultaneously.
3. Physical condition assessment. Note any visible damage to the drive itself: dents, scratches, broken connectors, signs of liquid exposure, missing screws (which may indicate the drive was previously opened). Record whether the drive was received in an antistatic bag.
4. Case assignment. The drive is assigned a unique case number that follows it through every stage of the recovery process. All work performed, notes, and results are logged under this case number.
5. Secure storage. After intake, the drive is stored in a designated area with access limited to recovery technicians. Drives are not left on open benches or in unsecured areas.

Austin Intake Protocol: How Rossmann Repair Group Receives a Shipped Drive

When a package arrives at the Austin lab at 2410 San Antonio Street, the receiving technician photographs the box before opening, photographs the drive in its antistatic bag before it leaves the bag, and photographs the drive label, PCB, and any visible physical damage after unboxing. These images are attached to the case file and serve as the dated baseline for any post-recovery dispute about the drive's arrival condition.

1. Box and outer-packaging photography. Crushed corners, carrier stickers, and the tracking barcode are captured before the box is cut open. If the box arrived damaged, a separate claim-ready image set is preserved.
2. Label capture and case assignment. Manufacturer, model, serial number, firmware revision, and capacity are logged against a unique case number. The case number is written on the intake form and stays with the drive through diagnosis, repair, imaging, and return shipping.
3. Pre-work imaging with DeepSpar Disk Imager for clicking or weak-read drives. If the drive spins but clicks, has bad SMART, or reads intermittently, the first technical action is a head-map-aware image pass on the DeepSpar. Imaging the healthy heads first minimizes further wear on degraded heads before any mechanical intervention. Running consumer recovery software at this stage is actively harmful; it ignores per-head damage and drags weak heads back across the surface.
4. PC-3000 Portable III diagnostic for non-mechanical symptoms. If the drive is not detected, reports the wrong capacity, or shows LBA 0 corruption, diagnosis moves to PC-3000 Portable III terminal access. The Service Area is interrogated for ROM, translator, and module integrity before the cover is opened. A firmware-level failure does not require opening the drive, so the drive stays sealed.
5. Donor drive inventory check before any head-stack work. For head swap cases, matching donor candidates (exact model family, firmware revision, head map, and preamp compatibility) are pulled from the in-house donor stock before the patient is scheduled for a clean-bench opening. Opening without a vetted donor on hand exposes the platters to cleanroom air for no useful purpose.

Physical Handoff to the 0.02 Micron ULPA Clean Bench

Head stack swaps, platter inspection, helium drive mechanical work, and voice coil actuator repair all require the drive cover to be removed. That work is performed in a 0.02 micron ULPA-filtered clean bench, not on a standard workbench. Airborne particles larger than the head-to-platter fly height cause permanent scratches on contact; ULPA filtration brings particulate counts below that threshold within the bench's working volume.

The handoff from the receiving desk to the clean bench is a deliberate physical transfer, not a queue on a cart. The intake technician carries the cased drive to the clean-bench area, logs the transfer in the case file, and places the drive in a staging tray on the bench. The drive stays on the bench for the duration of the open-drive work. When the cover is re-seated, the drive is imaged with PC-3000 Express or PC-3000 Portable III before it is moved back out.

Helium drives follow the same handoff but with an additional step: the cover is opened in a helium-managed environment and re-sealed with a fresh gasket plus a helium refill before imaging resumes. Helium drive mechanical recovery, including head swaps with helium refill, is performed in-house at the Austin lab. No patient drive is transshipped to an outside facility.

Handling During the Recovery Process

During active recovery work, the drive may go through multiple stages: initial diagnosis, physical repair (head swap, PCB work), firmware repair, and imaging. Each stage is documented with what was done and what was found.

Key handling practices during recovery:

• ESD precautions. Technicians wear grounding straps when handling exposed PCBs. Antistatic mats are used on workbenches. The PCB is the most ESD-sensitive component of a hard drive.
• Clean environment for open-drive work. Any procedure that requires opening the drive (head swap, platter inspection) is performed in a laminar flow bench with HEPA or ULPA filtration.
• No unnecessary disassembly. Drives are not opened unless the diagnosis indicates a mechanical problem requiring internal access. If the failure is firmware-level (accessible through PC-3000 without opening the drive), the drive stays sealed.
• Original components preserved. If parts are removed (original HSA, original PCB), they are stored with the case file. The patient drive's original parts are returned with the drive unless the customer specifies otherwise.

Data Transfer and Verification

After successful imaging, the recovered data is transferred to the return media (typically a new external hard drive or SSD provided by the lab). The transfer process includes:

• File listing generation. A complete file and folder listing is generated from the recovered image. This listing is provided to the customer for verification before the return media is shipped.
• Data integrity verification. The transferred files are spot-checked for readability. Critical file types (databases, PST files, virtual machine images) are verified to open correctly.
• Customer approval. The customer reviews the file listing and approves the recovery before the return media is shipped. This step confirms that the recovered data matches the customer's expectations and that no critical files are missing.

Return Shipping Protocol for the Patient Drive

When the original drive is returned to the customer, it leaves the lab in a condition that matches its intake record. If the cover was opened for a head swap or platter inspection, the re-assembly steps are documented and the drive is verified before it is packed for return shipping.

• Cover re-seat with fresh gasket. The original cover screws are torqued to the manufacturer's service spec in the documented diagonal pattern. Mismatched torque warps the top cover and can load the voice coil actuator out of spec.
• Head-parking verification. The heads are confirmed parked on the ramp (for ramp-load drives) or on the landing zone (for contact-start-stop drives) before the drive is powered off. A drive shipped with heads over the platter is one drop away from a head crash.
• Fresh antistatic repackaging. The return uses a new metalized shielding bag and new cushioning; intake packaging is not reused. The patient drive ships with the same cushioning spec documented in the HDD-Specific Shipping Requirements table: 2 plus inches of foam on all six sides in a rigid corrugated box.
• Insured tracked shipping. Return shipment goes out with tracking and declared-value insurance. The tracking number is added to the case file before the box leaves the building.
• Donor and original-parts disposition. If a donor drive was consumed for the recovery, the donor is retained with the case file. The patient's original parts (original HSA, original PCB) are returned with the patient drive unless the customer instructs otherwise in writing.

What Happens to the Original Drive After Recovery

After recovery is complete and the customer confirms receiving the recovered data, the lab handles the original drive according to the customer's instructions:

Return to customer (default)

The original drive is returned via insured shipping. Customers should not reuse the drive for storage, as the failure that caused data loss may recur. The drive may be kept as a backup reference or disposed of by the customer.

Secure destruction

If the customer requests it, the lab can securely destroy the drive. For mechanical hard drives, this typically involves degaussing (exposing the platters to a strong magnetic field that erases all magnetic data) or physical destruction (shredding). Documentation of destruction is provided.

Data purge from lab systems

The recovered data image stored on the lab's imaging workstation is deleted after the customer confirms receipt of the return media. Labs do not retain customer data indefinitely. The retention period (typically 7-30 days after confirmation) is defined in the lab's terms of service.

Frequently Asked Questions