Chain-of-custody is maintained through documented handoffs, restricted access handling, proof-of-delivery records, and exception reporting. Documentation is retained in accordance with company policy and contract requirements.