Controlled substance recordkeeping.

1Treat controlled-substance inventory as an accountable ledger.

At any moment, a registrant should be able to explain what was authorised, received, held, issued, transformed, sampled, returned, wasted, destroyed, transferred and physically present, by substance, strength, dosage form, lot, location and transaction. Ordinary inventory systems optimise availability. Controlled-substance control must also preserve legal authority, security, contemporaneous records, witness evidence, unit conversions, manufacturing yield and an investigation of every unexplained difference.

Seal fits where that accountable inventory meets day-to-day manufacturing. It keeps the ledger tied to actual containers, batch transformations, QC use, physical counts, quality state, waste and security events. That matters for API and dosage-form manufacturers, 503B outsourcing facilities, clinical-supply operations, laboratories and warehouses whose controlled material moves through more than one operational system.

1.1Why teams choose Seal for controlled substances

Controlled-substance records are usually vault logs and spreadsheets kept beside manufacturing, reconciled by hand against batch issues, yields, samples and waste when a count is due. Seal’s ledger posts each movement as it happens, from the batch step, laboratory use or destruction that caused it, and checks the registration and personal authority before the action. A book-to-physical difference can then be traced to the transaction behind it, and corrections reverse entries rather than overwrite them.

2Resolve authority before the action.

The registrant, DEA registration, business activity, address, expiration, schedules, state licences, responsible individuals, powers of attorney, order authority and quotas where applicable define what a site may do. Each transaction is evaluated against the authority in effect for its date, location, substance, schedule and activity. A valid company registration does not authorise every person, site or operation.

Personal eligibility resolves at the same moment: role, training, identity verification, dual control, witness independence, location access and transaction type. Termination, transfer, suspension or an expired credential removes eligibility immediately, and periodic privilege review compares physical access with electronic authority.

3Keep identity, custody and receipt exact.

The controlled item carries its DEA drug code, schedule, salt or base convention, strength, concentration, dosage form, package, unit of measure and conversion factors. Conversions between container count, dosage units, volume, solution mass and controlled-substance mass are versioned and attributable, so rounding cannot create an unexplained balance.

Secure locations (vault, cage, safe, cabinet, line-side staging, waste container, shipment handoff) are a controlled hierarchy with access rules and current status. Seal distinguishes permanent storage from temporary custody and records when material exceeds a permitted staging window.

Receipt opens the accountable chain: purchase or transfer authority, supplier registration, order reference where required, seal and package condition, lot, verified quantity, receiver and secure put-away. A packing-slip quantity is not accepted as physical fact until it has been verified.

4Post every movement to an append-only ledger.

DEA rules require registrants to keep complete and accurate records, on a current basis, of each substance received, sold, delivered or otherwise disposed of, but do not require a perpetual inventory.¹ The running ledger goes further: every receipt, move, issue, return, adjustment, sample, spill, waste, destruction, transfer and count correction posts a signed transaction with its before and after balance. Corrections reverse or supersede earlier entries with a rationale; they do not edit history. Backdating, negative balances, unexplained unit conversions, duplicate postings and out-of-sequence activity raise explicit exceptions rather than being absorbed into the total.

5Carry the ledger through manufacturing and the laboratory.

An issue to manufacturing connects the controlled lot and container, the actual quantity and scale, the person and any required witness, the room, equipment, batch and step, and the remaining container balance. Electronic batch execution can be configured to stop an unauthorised item, location, person or quantity from entering the process, while the ledger transaction is still posted.

Yield is a controlled-substance reconciliation. The input equivalent resolves against in-process material, bulk, dosage units, samples, residues, rejected units, spills, waste and remaining material. Expected process loss and analytical variability can set investigation thresholds, but they do not become unrecorded allowances; the actual difference remains visible.

QC, reserve and stability samples, reference standards, dilutions and retained solutions remain controlled inventory with custody, purpose, quantities, storage and disposal. A laboratory result does not close the material record: residual sample and preparation waste must reach a documented end state.

6Close material through waste, destruction or return.

Waste begins when recoverable material becomes unusable. The record identifies the source material or batch, the quantity or best supported estimate, the reason, form, container, custody and planned destruction. Process residue, rejected units, spill clean-up and analytical waste can need different measurement and witness controls.

Destruction proves irretrievability and closes the balance: authorisation, method, quantity, witnesses, the reverse distributor or disposal party and its registration, the certificate and the ledger posting. Seal distinguishes on-site destruction, transfer for destruction and final destruction confirmation, because shipping waste away does not by itself prove destruction.

Supplier, customer, recall and internal returns keep their source, authority, identity, quantity, tamper evidence and custody. Returned material does not re-enter available stock simply because a physical count increased.

7Count, reconcile and escalate.

A physical inventory is a frozen observation: effective date and time, registrant and location scope, counters and witnesses, method, opened and sealed containers, and the measurement rules applied. The DEA regulation at 21 CFR §1304.11 sets inventory requirements, including initial and biennial inventories. Seal preserves the actual snapshot and its basis rather than regenerating it later from current transactions.

Swipe to see the full diagram →

Reconciliation explains the book-to-physical difference against transaction cutoff, open receipts or issues, material in process, staged custody, unit conversion, measurement uncertainty, container tare and unresolved reversals. Each difference receives a documented explanation or an investigation, and the original discrepancy stays visible beside the corrected balance.

Potential theft, diversion, tampering, a falsified transaction, an access anomaly or a pattern of small discrepancies starts a clocked pathway: containment, security and quality escalation, preserved evidence, a preliminary assessment, notification decisions and investigation. Seal supports preparing and tracking the applicable DEA and local records; the determination of legal significance stays with accountable people.

For inspection, transactions, inventories, order evidence, manufacturing use, waste, destruction, discrepancies, access and corrections can be produced for the exact registrant, location, schedule, item and date range.² Controlled-substance evidence stays separate from general inventory while keeping the manufacturing and quality links needed to understand it.

8Prove one difficult reconciliation end to end.

Follow one Schedule II material from authorised order and receipt through vault put-away, weigh-and-dispense issue, partial return, batch conversion, in-process samples, rejected units, process waste, witnessed destruction, a physical count and final reconciliation. Include the hard cases: a unit-conversion error, scale rounding, staged material across the count cutoff, an unreturned QC remainder, a late destruction certificate, an access attempt by an unauthorised operator and an unexplained difference that triggers loss assessment. The first usable release must reproduce the balance without altering the original transactions.