In pharmaceutical distribution, "chain of custody" is a legal concept with a specific operational meaning. A controlled substance shipped from a manufacturer to a pharmacy must have a documented record of every physical handoff: who possessed it, when, under what storage conditions, and with what authorization. That documentation isn't optional. It's what allows regulators to confirm that the substance that arrived in the pharmacy is chemically identical to what left the manufacturer, and that it wasn't diverted, tampered with, or substituted anywhere along the route.
Carbon markets use the phrase "chain of custody" but have historically treated it as a metaphor rather than a technical standard. Understanding what that standard actually requires — and where the voluntary carbon market currently falls short of it — is the necessary starting point for building infrastructure that closes the gap.
What Chain of Custody Means as a Technical Standard
A chain-of-custody record, rigorously defined, must satisfy four properties. It must be complete: every custody event from origin to current possession is documented. It must be tamper-evident: modification of any record in the chain must be detectable. It must be traceable: any current possession state can be traced backward to the origin. And it must be queryable: authorized parties can retrieve the full chain or any segment of it on demand.
In pharmaceutical and forensic contexts, these properties are enforced by a combination of physical controls (tamper-evident packaging, temperature logs, signature requirements at handoffs) and document systems (batch records, transfer manifests, lot traceability databases). The key insight is that chain of custody isn't just documentation after the fact — it's a property engineered into the custody transfer process itself.
Applied to a voluntary carbon credit, this means the chain-of-custody record must begin not at issuance but at measurement. The credit's value claim derives entirely from a quantified emissions reduction or removal that happened in a specific place at a specific time. If that measurement event isn't documented with enough precision and traceability to verify that it actually occurred as claimed, the entire downstream record — the methodology audit, the registry issuance, the retirement certificate — rests on an unverified foundation.
The Six Components of a Carbon Credit's Provenance Chain
A complete chain of custody for a voluntary carbon credit has at minimum six distinct components, each of which must be documented in a way that links to the next:
- Measurement event record — date, location polygon, sensor type, data source (SAR satellite pass, LiDAR acquisition, ground-truth plot survey), raw output values, and applied uncertainty range. This is the origin document.
- Baseline scenario documentation — the counterfactual claim: what would have happened to this forest area without the project? The baseline must reference specific deforestation rate data, reference region definitions, and applicable methodology (e.g., VCS VM0007 or VM0015 for REDD+ projects).
- Methodology audit record — the validation body's assessment that the project's measurement and baseline approach complies with the approved methodology, including any material findings and their resolution.
- Verification report linkage — the monitoring period, the quantities claimed, and the verifier's attestation, linked to the specific monitoring data reviewed. This must be traceable to the measurement event records in component one.
- Registry issuance record — the registry's assignment of serial numbers to the verified quantity, including the batch date, the project ID, the vintage year, and the specific serial number range.
- Transfer and retirement log — every custody transfer from issuance onward: primary market sale, any secondary market transactions, and the final retirement event with the retiring entity, date, and stated purpose (e.g., corporate net-zero claim, Article 6.4 corresponding adjustment).
In the current voluntary carbon market, component six is reasonably well-documented within individual registry systems. Components four and five are documented in verifier reports and registry databases, though not in a standardized machine-readable format. Components one, two, and three — the measurement origin and its connection to the baseline claim — are the weakest links, typically existing only as PDFs in project developer portals that were not designed for cross-project comparison or programmatic querying.
Why the Pharmaceutical Analogy Breaks Down — and What to Do About It
The pharmaceutical chain-of-custody model works because the physical product being tracked is identical at origin and destination — a specific drug compound doesn't change its chemical properties during shipment, so any discrepancy is detectable by testing. Carbon credits don't work this way. The underlying emissions reduction or removal happened in a specific geographic location at a specific time, and it cannot be re-examined after the fact. Once the forest canopy that was measured in 2020 has been logged or burned, you cannot retroactively verify the measurement. The provenance record is the only thing that exists.
This makes the documentation quality requirements for carbon credit chain of custody stricter than for pharmaceutical products, not more lenient. There is no physical test that can catch a falsified baseline. There is no forensic re-analysis that can verify a canopy measurement that wasn't properly documented at the time. The chain of custody must be established prospectively, at the time of each custody event, with enough detail to support retrospective verification. That's a different — and harder — engineering problem than pharmaceutical track-and-trace.
We're not saying the voluntary carbon market has been deliberately falsifying documentation. The vast majority of project developers and registries are operating in good faith within the standards and tooling available to them. What we're saying is that "good faith" is not a verification mechanism, and the current market infrastructure makes it structurally difficult for even well-intentioned actors to produce the level of documentation that institutional buyers and auditors now require.
A Concrete Scenario: REDD+ in West Africa, 2024
Consider a hypothetical but technically representative scenario: a REDD+ project in a West African country, validated under VCS VM0009, covering approximately 85,000 hectares of tropical moist forest. The project developer contracted a remote sensing firm to produce annual above-ground biomass density maps using Sentinel-1 SAR data processed against a national forest inventory baseline.
The project's first five-year verification produces a claim of approximately 420,000 tonnes of CO₂-equivalent avoided deforestation. The VVB reviews the monitoring report, the SAR data products, and the baseline documentation and issues a verification statement. The registry issues 420,000 VCUs.
A corporate buyer purchases 15,000 VCUs through a carbon broker and retires them against a Scope 3 net-zero commitment. The buyer's sustainability team later tries to verify the provenance for an external audit. What they have: a retirement certificate, a registry serial number range, and the project name. What they would need for a complete chain-of-custody audit: the specific Sentinel-1 acquisition dates and processing parameters underlying the AGB density maps, the deforestation reference region used to establish the baseline, the VVB's complete data review notes, documentation that the project boundary doesn't overlap with adjacent project claims or government-reported forest loss, and the full transfer record from registry issuance through the broker to retirement.
None of those documents are currently in a format or location that allows the buyer to retrieve them in a single query. That's not a hypothetical problem — it's the standard state of carbon credit documentation today.
What Standards Currently Address This
The ICVCM's Core Carbon Principles (2023) include a requirement for "robust independent third-party validation and verification" and a prohibition on double-counting, but they don't specify a chain-of-custody data schema. The GHG Protocol's guidance on carbon credit quality (the Corporate Standard and the forthcoming Nature Standard) addresses what documentation buyers should maintain, but doesn't prescribe interoperability standards for cross-registry querying. ISO 14064-3 covers verification and validation of greenhouse gas statements and includes provisions for documentation requirements, but operates at the project level rather than the credit-transfer level.
The closest existing framework is the registry operators' own serialization systems — Verra's VCS registry assigns unique serial numbers that include project ID, vintage year, and sequential credit number. But this serialization covers the issuance and retirement phase only, not the pre-issuance measurement chain. Closing that gap requires linking registry serial numbers back to the specific measurement records and methodology audits that justify their issuance — a linkage that currently exists only in disconnected documents.
Standardizing that linkage — agreeing on the minimum data elements, the schema, the queryability requirements — is the foundational technical work that the voluntary carbon market's credibility requires. It's the difference between "chain of custody" as a phrase and chain of custody as an enforceable standard. The pharmaceutical industry needed several decades and a federal mandate to get there. Carbon markets may not have that kind of time.
