All blueprints

Every gram authorized. Every movement balanced. Every discrepancy investigated.

Control DEA registrations, schedules and authority, receipts, vault inventory, manufacturing issues and yields, transfers, returns, waste, destruction, physical inventories, reconciliation, and loss reporting.

Illustration of a seal following a reagent container from storage through identity scanning.
A controlled drug perpetual ledger and accountable manufacturing mass balance

Controlled-substance accountable ledger

Scroll to explore the full-size diagram.

How to read this diagram

Every authorized movement posts an immutable balance and stays connected to physical custody and manufacturing mass.

Receipt
Order authority, physical verification and secure putaway open the lot.
Issue
Batch dispense posts exact controlled equivalent and remaining balance.
Waste
Source, physical form, custody and destruction remain separately accountable.
Mass balance
Finished, samples, waste and unexplained difference close the batch.

Controlled-substance inventory is an accountable mass ledger. At any moment, a registrant should be able to explain what was authorized, received, held, issued, transformed, sampled, returned, wasted, destroyed, transferred, and physically present—by substance, strength or concentration, dosage form, package, lot, location, and transaction.

Ordinary inventory systems optimize availability. Controlled-substance control must also preserve legal authority, security, contemporaneous records, witness evidence, unit and measure conversions, manufacturing yield, and investigation of every unexplained difference.

A controlled drug perpetual ledger and accountable manufacturing mass balance

Controlled-substance accountable ledger

Scroll to explore the full-size diagram.

How to read this diagram

Every authorized movement posts an immutable balance and stays connected to physical custody and manufacturing mass.

Receipt
Order authority, physical verification and secure putaway open the lot.
Issue
Batch dispense posts exact controlled equivalent and remaining balance.
Waste
Source, physical form, custody and destruction remain separately accountable.
Mass balance
Finished, samples, waste and unexplained difference close the batch.

Registration and activity authority come first

Registrant, DEA registration, business activity, physical address, expiration, schedules, state licenses, responsible individuals, powers of attorney, order authority, quotas where applicable, and restrictions define what a site may do.

Transactions are evaluated against the effective authority for date, location, substance, schedule, and activity. A valid company registration does not authorize every person, site, or operation.

The controlled item preserves substance identity

DEA drug code, schedule, active moiety or substance, salt or base convention, strength, concentration, dosage form, package, unit of measure, conversion factor, NDC or internal item, and product status remain governed.

Conversions between container count, dosage units, volume, solution mass, and controlled-substance mass are versioned and attributable. Rounding cannot create unexplained balance.

Secure locations are controlled hierarchies

Vault, cage, safe, cabinet, room, refrigerator, freezer, staging point, dispensing booth, line-side location, waste container, and shipment handoff retain access rules, capacity, alarm or surveillance context, and current status.

The system distinguishes authorized permanent storage from temporary custody and records when material exceeds a permitted staging window.

Receipt creates an accountable opening transaction

Purchase or transfer authority, supplier registration, order form or electronic order reference where required, shipment, seal, delivery, item, lot, quantity, package condition, discrepancy, receiver, date, and secure putaway remain one chain.

Schedule-specific documentation requirements are configured by activity. The receiving record never treats a packing slip quantity as accepted physical fact without verification.

The perpetual ledger is append-only

Every receipt, move, issue, return, adjustment, sample, spill, waste, destruction, transfer, shipment, and count correction posts a signed transaction with before and after balance.

Corrections reverse or supersede prior entries with rationale; they do not edit history. Backdating, negative balance, unexplained unit conversion, duplicate posting, and out-of-sequence activity raise explicit exceptions.

Material identity continues into manufacturing

An issue connects controlled lot and container, actual quantity, scale or measure, person, witness where required, room, equipment, batch, step, time, remaining container balance, and return or consumption path.

Electronic batch execution prevents an unauthorized item, schedule, location, person, or quantity from entering the process while preserving the legal ledger transaction.

Yield is a controlled-substance reconciliation

Input controlled-substance equivalent resolves against in-process material, bulk, dosage units, samples, residues, recoveries, rejected units, spills, waste, destruction, and remaining material.

Expected process loss and analytical variability can set investigation thresholds, but they do not become unrecorded allowances. Actual difference remains visible.

Samples and standards remain controlled inventory

QC samples, reserve samples, stability samples, reference standards, analytical preparations, dilutions, retained solutions, and unused returns carry custody, purpose, quantities, calculations, storage, use, and final disposal.

A laboratory result does not close the accountable material record. Residual sample and preparation waste must reach a documented end state.

Waste begins when recoverable material becomes unusable

Waste record identifies source material or batch, substance, quantity or best supported estimate, reason, physical form, container, creation time, custody, storage, recovery prohibition, and planned destruction.

Process residue, rejected dosage units, spill cleanup, analytical waste, and returned material can require different measurement and witness controls.

Destruction proves irretrievability and final balance

Authorization, method, quantity, substance, container, witnesses, reverse distributor or disposal party, registrations, transfer, date, certificate, and ledger posting close the material.

The record distinguishes on-site destruction, transfer for destruction, and final destruction confirmation. Shipping waste away does not itself prove destruction.

Returns preserve the original accountable path

Supplier returns, customer or dispenser returns, reverse distribution, recall returns, rejected deliveries, and internal returns retain source, authority, identity, quantity, tamper and custody, eligibility, movement, and disposition.

Returned controlled substance does not re-enter available stock simply because a physical count increased.

Book balance, physical count, open custody, unit conversion, and transaction evidence resolve every discrepancy

Physical inventory is a frozen observation

The inventory defines effective date and time, registrant and location scope, start and end controls, counters, independence or witness, method, opened and sealed containers, estimated or exact measurement rules, schedule, item, lot, and physical result.

The DEA regulation at 21 CFR §1304.11 sets inventory requirements including initial and biennial inventory obligations. Seal preserves the actual inventory snapshot and its basis rather than regenerating it later from current transactions.

Reconciliation explains book-to-physical difference

Reconciliation considers transaction cutoff, open receipts or issues, material in process, staged custody, unit conversion, measurement uncertainty, container tare, unresolved reversals, waste, and count evidence.

Each difference receives a documented explanation or investigation. The corrected book balance and original discrepancy remain separately visible.

Theft and significant loss follow a clocked pathway

Potential theft, diversion, tampering, unexplained loss, falsified transaction, access anomaly, or repeated small discrepancy triggers immediate containment, security and quality escalation, preserved evidence, preliminary assessment, notification decisions, investigation, and required reporting.

The system supports controlled preparation and tracking of applicable DEA and local records without making the legal significance determination automatically.

Access and segregation are enforced at action time

Role, registration association, authorization, training, identity verification, dual control, witness independence, location access, schedule, transaction type, shift, and emergency status resolve before the action.

Privilege review compares physical and electronic authority. Termination, transfer, suspension, or expired credential removes eligibility immediately.

Audit views retain registration boundaries

Transactions, inventories, receipts, order evidence, manufacturing use, waste, destruction, returns, discrepancies, reports, access, and corrections can be produced for the exact registrant, location, schedule, item, date range, and record family.

The record separates controlled-substance evidence from general inventory while retaining the manufacturing and quality links needed to understand it.

Where Seal is strongest

Seal is strongest where accountable inventory meets manufacturing reality. It keeps the legal ledger tied to actual containers, batch transformations, QC use, physical counts, quality state, waste, and security events.

That matters for API and dosage-form manufacturers, 503B outsourcing facilities, clinical-supply operations, laboratories, warehouses, and other registrants whose controlled material moves through more than one operational system.

Prove one difficult reconciliation end to end

The first implementation should follow one Schedule II material from authorized order and receipt through vault putaway, container opening, weigh-and-dispense issue, partial return, batch conversion, in-process samples, rejected units, process waste, witnessed destruction, finished inventory, physical count, discrepancy, investigation, and final reconciliation.

Include a unit-conversion error, scale rounding, staged material across the count cutoff, broken tablet, unreturned QC remainder, late destruction certificate, access attempt by an unauthorized operator, and an unexplained difference that triggers loss assessment. The first usable release must reproduce the balance without altering the original transactions.

Operating model

Configured in Seal, with shared records across the work.

Capabilities

Connected records

Entity hierarchy
What it records
Kind
Controlled-Substance Registration
Registrant, authority, physical address, activities, schedules, expiration, powers, quotas, and restrictions.
entity
Controlled Item
Drug code, schedule, substance, base or salt, strength, form, package, units, conversion, and product.
entity
Controlled Material Lot
Item, supplier or source, lot, containers, quantity, concentration, status, expiry, and genealogy.
entity
Secure Custody Location
Registrant, site, vault, safe, cabinet, room, temporary stage, access rules, capacity, and state.
entity
Controlled Receipt
Order authority, supplier, shipment, seal, physical verification, discrepancy, receiver, and putaway.
entity
Schedule II Material Receipt
Registration and supplier authority, order evidence, seal, count, lot, discrepancy, and vault putaway.
template
RECEIPT-CS-260801-12
Receipt of two sealed API containers against an authorized electronic order.
record
Perpetual Inventory Transaction
Substance, lot, container, location, amount, units, conversion, before and after balance, actor, and time.
entity
Manufacturing Issue
Container, quantity, scale, room, batch, step, operator, witness, return, consumption, and balance.
entity
Controlled Manufacturing Dispense
Authority, vault pick, container verification, measured quantity, witness, batch issue, and return.
template
ISSUE-B260801-OPI
2.4816 kg issued to batch B260801 with 0.1834 kg returned and verified.
record
Controlled Mass Reconciliation
Input equivalent, intermediates, product, samples, residues, rejects, waste, returns, uncertainty, and difference.
entity
Controlled Return
Source, authority, item, quantity, custody, tamper, eligibility, destination, and disposition.
entity
Controlled Waste
Source, substance, quantity or estimate, physical form, reason, container, custody, and destruction status.
entity
Witnessed Process Waste
Source, calculation or measure, container, witness, secure hold, authorization, and destruction.
template
WASTE-B260801-04
Granulation residue and cleanup media representing 12.7 g controlled equivalent.
record
Witnessed Destruction
Waste, authorization, method, quantity, witnesses, provider, transfer, certificate, and ledger close.
entity
Physical Inventory
Registrant, location, effective date and time, scope, counters, rules, physical observations, and attestation.
entity
Biennial Controlled Inventory
Frozen cutoff, schedule and location scope, counters, opened and sealed containers, observations, and attestation.
template
INV-DEA-HOU-2026
Effective inventory at opening of business with two bounded count discrepancies.
record

Questions and answers

It manages registration and activity authority, controlled items and lots, secure locations, orders and receipts, perpetual transactions, manufacturing use, samples, waste, returns, destruction, physical inventories, discrepancies, and loss records.
Yes. Every signed movement posts an append-only transaction with substance, lot, container, location, amount, units, conversion, before and after balance, actor, time, authority, and source work.
It supports configuration and execution of initial, biennial, annual, periodic, or event-driven inventories with a frozen effective time, exact registrant and location scope, count rules, observations, attestations, and reconciliation.
Order and receipt records can reference and reconcile the applicable paper or electronic order authority, supplier, schedules, quantities, partial fills, cancellations, discrepancies, and retained evidence.
Approved item-specific conversion rules are versioned with precision and rounding. Every transaction retains original and accountable units so the balance can be reproduced.
Issued controlled equivalent is balanced against in-process and finished material, samples, rejected units, residues, recoveries, returns, spills, waste, destruction, and supported measurement uncertainty.
Yes. Sample receipt, aliquots, reference standards, dilutions, analytical use, residual material, waste, storage, custody, calculations, and final disposal remain accountable.
The record links authorization, material and quantity, method, witnesses, secure custody, transfer provider, registrations, destruction date, certificate, exceptions, and final ledger posting.
Returns retain source, authority, identity, tamper and custody, quantity, eligibility assessment, secure storage, movement, reverse distribution, destruction, or other final disposition.
The difference is preserved while cutoff, open custody, transactions, conversions, tare, measurement, corrections, and evidence are reconciled. Unexplained differences trigger investigation and loss assessment.
No. It assembles facts, quantities, patterns, access, substance, circumstances, containment, clocks, and filing evidence for authorized personnel to make and document the required legal determination.
Prove one controlled lot from authorized receipt through vault custody, manufacturing issue, returns, yield, QC use, waste, destruction, physical count, discrepancy, loss assessment, and exact final balance.

Related blueprints

Aseptic Qualification

Aseptic Operator & Gowning Qualification Software

Govern aseptic roles, curricula, gowning qualifications, practical assessments, APS participation, intervention authorization, cleanroom access, personnel monitoring, observations, restrictions, requalification, and live execution eligibility.

PV

Pharmaceutical Process Validation & PPQ Software

Coordinate process validation in Seal, from the agreed validation basis and PPQ protocol to execution, exceptions and review. Trace each conclusion to the evidence that supports it.

APS / Media Fill

Aseptic Process Simulation & Media Fill Management Software

Design APS coverage across lines, shifts, operators, interventions, container configurations, campaign conditions, incubation, unit reconciliation, failures, and requalification.

Recall

Product Recall & Market Action Management Software

Run health-hazard evaluation, affected-lot and unit scope, recall strategy, authority communication, consignee notification, response tracking, product reconciliation, effectiveness checks, status reporting, and termination.

Cold Chain

Pharmaceutical Cold Chain & Temperature Excursion Management Software

Qualify routes and shipping systems, assemble logger evidence, calculate exact exposure, identify the affected physical population, and make stability-backed disposition decisions without reconstructing a journey from emails.

Single-Use

Single-Use Systems & Assembly Lifecycle Management Software

Control single-use assembly designs, supplier components, sterilization, extractables and leachables, build and installation, connections, integrity tests, use windows, product contact, and disposition.

See your process in Seal.

Tell us about your workflow. We’ll show you how neil and Seal can help your team.

Book a demo