Chain of Custody for Shipped Drives

When a customer ships a failed drive to a data recovery lab, the drive passes through multiple handling stages: packaging, carrier transport, intake, diagnosis, recovery work, data transfer, and return shipping. Each stage introduces physical risks (shock, vibration, static discharge, temperature extremes) and requires documentation to maintain a verifiable chain of custody. This article covers the practical requirements at each stage and explains why proper handling matters for recovery outcomes.

Packaging Requirements for Shipping a Failed Drive

A failed hard drive is more vulnerable to shipping damage than a working drive. Drives that failed to park correctly may have heads stuck to the platter surface (stiction). Drives with loose internal components (broken head arm, dislodged filter) can sustain additional damage from vibration and impact during transit. Proper packaging minimizes these risks.

HDD-Specific Shipping Requirements

A mechanical hard drive is a precision device with read/write heads that fly 3 to 5 nanometers above spinning platters at 5,400 to 7,200 RPM. A drive that is already failing, clicking, or has experienced a head crash is structurally more fragile than a healthy drive. Generic cushioning and a soft mailer are not adequate. The goal of packaging is to isolate the drive from the carrier's vibration and drop environment so that the patient arrives in the same state it left.

• Metalized shielding bag preferred over pink poly. Pink poly bags dissipate static; metalized shielding bags both dissipate static and block external electrostatic fields. For a suspected PCB failure, use a shielding bag.
• Rigid closed-cell foam or 2 plus inches of bubble wrap on all six sides. Packing peanuts settle in transit and leave dead zones at the top of the box. Loose fill alone is not acceptable.
• Double-box for drives suspected of stiction or head-stack damage. Drop the cushioned inner box into a second outer box with 2 plus inches of foam around the inner box. This isolates the drive from sustained conveyor vibration, which worsens stiction and can walk a detached head across the platter surface.
• Include a desiccant pack for humid-climate transit. Condensation on an internal filter or PCB creates additional failure modes during the intake spin-up test.
• Never ship a drive in its original retail clamshell or a plastic hard case alone. Hard cases transmit shock directly to the drive body. Cushioning must be between the hard case and the outer box.

Intake Documentation and Labeling

When a drive arrives at the lab, intake documentation creates the formal chain of custody record. The intake process typically includes:

1. Package condition inspection. Note any visible damage to the shipping box (crushed corners, wet spots, punctures). If the package is damaged, photograph it before opening. This documentation is relevant if an insurance claim is needed.
2. Drive identification. Record the drive's manufacturer, model number, serial number, firmware revision, and capacity from the drive label. Photograph the label. This information uniquely identifies the drive and prevents mix-ups in a lab handling multiple cases simultaneously.
3. Physical condition assessment. Note any visible damage to the drive itself: dents, scratches, broken connectors, signs of liquid exposure, missing screws (which may indicate the drive was previously opened). Record whether the drive was received in an antistatic bag.
4. Case assignment. The drive is assigned a unique case number that follows it through every stage of the recovery process. All work performed, notes, and results are logged under this case number.
5. Secure storage. After intake, the drive is stored in a designated area with access limited to recovery technicians. Drives are not left on open benches or in unsecured areas.

Custody Log Fields Recorded at Each Transfer

The case file is the chain-of-custody record. Every time the drive moves between stations (intake, diagnosis bench, clean bench, imaging workstation, secure storage, return-pack), the receiving technician logs the transfer with a fixed set of fields. The table below shows which fields are captured at which event so a customer can read the case file later and reconstruct exactly where the drive was at each step.

Brand-specific intake notes are added in the diagnosis-bench log where relevant. Seagate drives that present LBA 0 corruption or translator faults are tagged for PC-3000 SA module work before any mechanical decision; details on that recovery path live on the Seagate data recovery service page. Western Digital drives that present a head-stack issue are tagged with the family-level ROM and preamp constraints documented on the Western Digital data recovery service page.

Austin Intake Protocol: How Rossmann Repair Group Receives a Shipped Drive

When a package arrives at the Austin lab at 2410 San Antonio Street, the receiving technician photographs the box before opening, photographs the drive in its antistatic bag before it leaves the bag, and photographs the drive label, PCB, and any visible physical damage after unboxing. These images are attached to the case file and serve as the dated baseline for any post-recovery dispute about the drive's arrival condition.

1. Box and outer-packaging photography. Crushed corners, carrier stickers, and the tracking barcode are captured before the box is cut open. If the box arrived damaged, a separate claim-ready image set is preserved.
2. Label capture and case assignment. Manufacturer, model, serial number, firmware revision, and capacity are logged against a unique case number. The case number is written on the intake form and stays with the drive through diagnosis, repair, imaging, and return shipping.
3. Pre-work imaging with DeepSpar Disk Imager for clicking or weak-read drives. If the drive spins but clicks, has bad SMART, or reads intermittently, the first technical action is a head-map-aware image pass on the DeepSpar. Imaging the healthy heads first minimizes further wear on degraded heads before any mechanical intervention. Running consumer recovery software at this stage is actively harmful; it ignores per-head damage and drags weak heads back across the surface.
4. PC-3000 Portable III diagnostic for non-mechanical symptoms. If the drive is not detected, reports the wrong capacity, or shows LBA 0 corruption, diagnosis moves to PC-3000 Portable III terminal access. The Service Area is interrogated for ROM, translator, and module integrity before the cover is opened. A firmware-level failure does not require opening the drive, so the drive stays sealed.
5. Donor drive inventory check before any head-stack work. For head swap cases, matching donor candidates (exact model family, firmware revision, head map, and preamp compatibility) are pulled from the in-house donor stock before the patient is scheduled for a clean-bench opening. Opening without a vetted donor on hand exposes the platters to cleanroom air for no useful purpose.

Write-Protected Imaging Path

The imaging tools the lab runs against a patient drive are read-only on user data sectors. A DeepSpar Disk Imager read pass copies sectors from the patient drive into an image file on the imaging workstation; it does not write back to the patient drive. The per-head and per-sector control on the imager is for skipping past damaged areas and re-attempting reads with different timing, not for modifying the patient drive.

PC-3000 Portable III terminal work on a sealed drive is scoped to the Service Area: ROM, translator, defect lists, and other firmware modules. SA-module repair edits the drive's internal firmware structures so the user-data area becomes readable; it does not write to the user-data sectors themselves. In plain terms, both tools read your data; neither one writes over your data. The case file logs the imager used, the head map, and the session timestamps so the imaging path is reconstructable after the fact.

Tamper-Evident Handling and Antistatic Bag Re-Seal

The antistatic bag the customer ships the drive in is the first tamper-evident element of the custody record. When the package is opened at the Austin receiving desk, the bag is photographed sealed-on-arrival before any tool touches it. If the bag arrives unsealed or shows tears, that is noted in the intake log and the photo set captures the condition. Cutting or peeling the bag open is a documented step, not an incidental movement; the opening is logged with the receiving technician's initials and the timestamp, and a second photograph captures the drive inside the now-open bag.

The original intake bag is retained with the case file until return shipping. For the return, a fresh metalized shielding bag is used; intake bags are not reused for shipping the drive back. The fresh bag is heat-sealed or fold-and-tape closed depending on the bag spec, photographed sealed, and the photo ID is logged with the return-pack record. A customer who wants to verify the return seal can match the bag in their hand against the dated return-pack photograph in the case file.

Physical Handoff to the 0.02 Micron ULPA Clean Bench

Head stack swaps, platter inspection, helium drive mechanical work, and voice coil actuator repair all require the drive cover to be removed. That work is performed in a 0.02 micron ULPA-filtered clean bench, not on a standard workbench. Airborne particles larger than the head-to-platter fly height cause permanent scratches on contact; ULPA filtration brings particulate counts below that threshold within the bench's working volume.

The handoff from the receiving desk to the clean bench is a deliberate physical transfer, not a queue on a cart. The intake technician carries the cased drive to the clean-bench area, logs the transfer in the case file, and places the drive in a staging tray on the bench. The drive stays on the bench for the duration of the open-drive work. When the cover is re-seated, the drive is imaged with PC-3000 Express or PC-3000 Portable III before it is moved back out.

Helium drives follow the same handoff but with an additional step: the cover is opened in a helium-managed environment and re-sealed with a fresh gasket plus a helium refill before imaging resumes. Helium drive mechanical recovery, including head swaps with helium refill, is performed in-house at the Austin lab. No patient drive is transshipped to an outside facility.

Secure Storage Between Sessions

Recovery work on a single drive can span several days. A head-stack swap might happen on one day and the post-swap imaging pass on the next; SA module work on PC-3000 Portable III can sit overnight in the middle of a long defect-list rebuild. Between sessions, the drive is stored inside a locked cabinet in the Austin lab. The cabinet ID is recorded in the case file alongside the timestamp the drive was checked in and the timestamp it was checked out for the next session.

The drive is paired with its case file in storage so the two never separate. No patient drive is left on an open bench overnight, on top of a workstation, or on a holding cart outside business hours. The cabinet is on the same floor as the diagnostic and clean-bench stations; the drive does not leave the lab building between sessions any more than it leaves the building during active work. For broader context on how this fits into the mechanical recovery workflow, the hard drive data recovery service page walks through the full process from intake to return.

Handling During the Recovery Process

During active recovery work, the drive may go through multiple stages: initial diagnosis, physical repair (head swap, PCB work), firmware repair, and imaging. Each stage is documented with what was done and what was found.

Key handling practices during recovery:

• ESD precautions. Technicians wear grounding straps when handling exposed PCBs. Antistatic mats are used on workbenches. The PCB is the most ESD-sensitive component of a hard drive.
• Clean environment for open-drive work. Any procedure that requires opening the drive (head swap, platter inspection) is performed in a laminar flow bench with HEPA or ULPA filtration.
• No unnecessary disassembly. Drives are not opened unless the diagnosis indicates a mechanical problem requiring internal access. If the failure is firmware-level (accessible through PC-3000 without opening the drive), the drive stays sealed.
• Original components preserved. If parts are removed (original HSA, original PCB), they are stored with the case file. The patient drive's original parts are returned with the drive unless the customer specifies otherwise.

Data Transfer and Verification

After successful imaging, the recovered data is transferred to the return media (typically a new external hard drive or SSD provided by the lab). The transfer process includes:

• File listing generation. A complete file and folder listing is generated from the recovered image. This listing is provided to the customer for verification before the return media is shipped.
• Data integrity verification. The transferred files are spot-checked for readability. Critical file types (databases, PST files, virtual machine images) are verified to open correctly.
• Customer approval. The customer reviews the file listing and approves the recovery before the return media is shipped. This step confirms that the recovered data matches the customer's expectations and that no critical files are missing.

Return Shipping Protocol for the Patient Drive

When the original drive is returned to the customer, it leaves the lab in a condition that matches its intake record. If the cover was opened for a head swap or platter inspection, the re-assembly steps are documented and the drive is verified before it is packed for return shipping.

• Cover re-seat with fresh gasket. The original cover screws are torqued to the manufacturer's service spec in the documented diagonal pattern. Mismatched torque warps the top cover and can load the voice coil actuator out of spec.
• Head-parking verification. The heads are confirmed parked on the ramp (for ramp-load drives) or on the landing zone (for contact-start-stop drives) before the drive is powered off. A drive shipped with heads over the platter is one drop away from a head crash.
• Fresh antistatic repackaging. The return uses a new metalized shielding bag and new cushioning; intake packaging is not reused. The patient drive ships with the same cushioning spec documented in the HDD-Specific Shipping Requirements table: 2 plus inches of foam on all six sides in a rigid corrugated box.
• Insured tracked shipping. Return shipment goes out with tracking and declared-value insurance. The tracking number is added to the case file before the box leaves the building.
• Donor and original-parts disposition. If a donor drive was consumed for the recovery, the donor is retained with the case file. The patient's original parts (original HSA, original PCB) are returned with the patient drive unless the customer instructs otherwise in writing.

Return-Shipping Seal Verification

The return shipment is built so the customer can verify what they received against what the case file recorded. Three artifacts make the return externally verifiable: the customer-visible bag-seal photograph, the cover-screw torque pattern photograph, and the case-file lookup against the drive's serial number.

• Bag-seal photograph on the dated case file. The fresh metalized shielding bag is photographed sealed, with the case number and date visible in the frame. The customer can compare the bag in their hand against this image.
• Cover-screw torque pattern photograph (if the drive was opened). When the cover was removed for a clean-bench procedure, the re-assembled cover is photographed with the diagonal torque pattern annotated. A customer who later opens the drive themselves can match the screw pattern against the photo to confirm the cover was re-seated as documented.
• Case-file lookup against the serial number. The serial number on the drive label is the simplest external identifier. The case file records the intake serial and the return serial; they are identical. A customer who wants to confirm the chain in writing can reference their case number and request the dated photo set and transfer log.

What Happens to the Original Drive After Recovery

After recovery is complete and the customer confirms receiving the recovered data, the lab handles the original drive according to the customer's instructions:

Return to customer (default)

The original drive is returned via insured shipping. Customers should not reuse the drive for storage, as the failure that caused data loss may recur. The drive may be kept as a backup reference or disposed of by the customer.

Secure destruction

If the customer requests it, the lab can securely destroy the drive. For mechanical hard drives, this typically involves degaussing (exposing the platters to a strong magnetic field that erases all magnetic data) or physical destruction (shredding). Documentation of destruction is provided.

Data purge from lab systems

The recovered data image stored on the lab's imaging workstation is deleted after the customer confirms receipt of the return media. Labs do not retain customer data indefinitely. The retention period (typically 7-30 days after confirmation) is defined in the lab's terms of service.

Frequently Asked Questions