Seal integrity is the controlled use, recording and verification of uniquely identified seals on containers, trailers, doors or other cargo closures so unauthorised opening, replacement or interference becomes visible as a custody event.
A seal does not make a container impossible to open. It makes legitimate closure and later opening more traceable when the seal itself is properly selected, controlled, applied, recorded and checked.
A seal is a custody signal, not a magic lock and not proof that the cargo inside is correct.
This is Article 119 in the extended How Logistics Works series. Chain of Custody remains the broader possession-and-evidence owner. High-Value Cargo remains the wider security owner. This page owns the seal as a specific physical closure control and evidence point.
The Seal-Integrity Chain
Transport unit inspected → correct seal selected → seal issued under control → seal number recorded → seal applied to the correct closure → application verified → custody transfers carry seal state → seal checked at defined points → authorised removal or discrepancy → replacement documented if needed → history preserved.
The seal works only as part of this process. A strong physical seal with weak number control can create false confidence.
ISO 17712 Is the Current International Mechanical-Seal Standard
ISO 17712:2013, Freight containers — Mechanical seals, remains the current published international standard and was confirmed again through ISO’s systematic review process in December 2023.
ISO 17712 establishes uniform procedures for the classification, acceptance and withdrawal of mechanical freight-container seals used in international commerce.
The standard tells us something important about the object. It does not replace the user’s operating controls around storage, issue, application and checking.
High-Security Seal Does Not Mean High-Security Process
A high-security seal can be:
- stored where anyone can take it;
- issued without a record;
- applied to the wrong container;
- recorded with the wrong number;
- cut and replaced without explanation;
- left unverified at destination.
The physical device can meet a standard while the operational chain remains weak.
This is why U.S. CBP’s CTPAT security criteria pair high-security seals with written procedures for seal control, affixing, integrity, compromise reporting and designated employees who distribute seals.
Seal Integrity Starts Before Stuffing
Sealing a damaged or compromised transport unit preserves the wrong state.
Security programmes such as CTPAT require inspection of container or trailer integrity before stuffing, including doors, locking mechanisms and structural areas.
The logistics principle is general:
inspect the closure and transport unit before relying on the seal to represent later integrity.
The Seal Number Is Part of the Shipment State
A seal is much more useful when its unique identifier is recorded against the correct container, trailer or shipment.
Useful records can include:
- seal number;
- container or trailer identity;
- shipment or booking reference;
- date and time applied;
- location;
- person or role applying it;
- condition at application;
- subsequent verification events;
- authorised removal or replacement.
Without the number relationship, an “intact seal” at destination may be an intact replacement rather than the original closure.
Record Before the Vehicle Leaves
A seal number written down after departure from memory defeats much of its evidentiary value.
Where consequence justifies it, capture the number through:
- barcode scan;
- photograph;
- system entry;
- electronic seal event;
- dual verification.
The method should make transcription error difficult enough for the shipment risk.
A Seal Number Can Be Correctly Recorded on the Wrong Container
Two containers are being loaded side by side. Seal 1001 belongs to Container A, Seal 1002 to Container B.
An operator records the numbers correctly but swaps which container receives which seal.
The database is internally consistent with its entry. Physical identity is wrong.
Apply-and-confirm should therefore bind:
container identity + seal identity + observed closure.
Seal Storage Is an Inventory-Control Problem
Unused seals are security-sensitive stock.
Weak seal storage allows someone to obtain an unused legitimate seal, open a container and replace the original with another valid device.
A controlled process can include:
- restricted access;
- serial-number inventory;
- issue records;
- lost-seal reporting;
- unused-seal reconciliation;
- destruction or controlled disposition of damaged seals.
The exact control level should follow shipment risk and programme requirements.
Seal Issue Needs an Authorised User
CTPAT criteria specifically require designated employees for seal distribution in the covered programme context.
The broader operational idea is separation between:
- seal inventory;
- shipment planning;
- physical application;
- verification.
Not every operation requires four different people. The roles should still be understood so one user cannot invisibly create, issue, apply and rewrite all evidence without trace.
The Seal Should Be Applied to the Correct Locking Point
A high-security seal placed through a weak or wrong hasp may not provide the intended control.
Apply according to:
- manufacturer instructions;
- container / trailer design;
- applicable programme requirements;
- carrier and authority procedures.
This article does not prescribe one door or locking position for every equipment type.
Application Verification Should Check More Than Presence
A seal can hang through the correct point without being fully engaged.
Depending on seal type, the user may need to:
- close and lock;
- apply the seal;
- pull or otherwise test engagement as instructed;
- read the number;
- check for visible defect;
- record the event.
The objective is to verify both identity and mechanical application.
Seal Integrity Travels Through Handoffs
At defined custody boundaries, the next party can verify:
- expected seal number;
- seal present;
- visible condition;
- closure condition;
- evidence of tampering;
- reason for any authorised replacement.
The seal state becomes part of Chain of Custody.
An Intact Seal Proves Less Than Many People Assume
An intact correct seal can support the claim that the sealed closure has not obviously been opened and resealed through that seal position since the recorded application.
It does not prove:
- the correct cargo was loaded;
- nothing entered through another opening;
- the container structure is uncompromised;
- the cargo remained undamaged;
- the cargo stayed at correct temperature;
- the transport unit never changed custody;
- the seal itself was not compromised by a method invisible to the inspection performed.
Seal integrity belongs inside a layered security and custody system.
Seal Mismatch Is an Exception, Not an Invitation to Guess
Expected seal: 887421. Observed seal: 887427.
Possible explanations include:
- transcription error;
- wrong seal applied at origin;
- authorised inspection and replacement;
- container swap;
- record attached to wrong shipment;
- unauthorised opening.
The correct response depends on the shipment and programme, but the state should remain visibly unresolved until evidence establishes the path.
Do Not Cut First and Investigate Later When the Mismatch Matters
Opening a mismatched seal can destroy evidence about how the container arrived.
Where security, customs, high-value or regulated cargo procedures apply, follow the relevant hold and notification route before opening.
For ordinary freight, local receiving procedures still benefit from documenting the mismatch before the physical state changes.
Authorised Inspection Requires a Seal-Replacement Record
Customs, security, carrier or inspection activity can legitimately require opening a sealed unit.
The chain should preserve:
- old seal number;
- reason for opening;
- authority or role;
- date, time and location;
- inspection or access record;
- new seal number;
- who applied and verified the new seal.
A replacement seal is not inherently suspicious. An unexplained replacement is.
Seal History Should Not Be Overwritten
If Seal A becomes Seal B after an authorised inspection, the database should not simply replace A with B and erase the transition.
The current state is Seal B. The custody history includes Seal A → authorised opening → Seal B.
That history can become important for claims, security review and border reconciliation.
Broken Seal and Missing Seal Are Different Exception Types
A broken seal may still be physically present and identifiable.
A missing seal can remove evidence of whether the closure was legitimately opened, detached accidentally or never sealed correctly.
Reason codes should preserve the distinction because the investigation paths differ.
Electronic Seals Add Event Data but Not Automatic Truth
Electronic seals and smart devices can report opening, tamper or location events.
They can improve visibility but introduce dependencies:
- battery;
- connectivity;
- sensor integrity;
- device identity;
- time synchronisation;
- data platform;
- cybersecurity.
A missing electronic event does not automatically prove no opening occurred. The device and communications path need their own health state.
Seal Data Should Join the Shipment’s Digital Shadow
Seal application and replacement can be represented as logistics events:
- seal applied;
- seal verified;
- seal mismatch detected;
- seal removed by authority;
- replacement seal applied;
- final seal removed at authorised opening.
The seal becomes more useful when it can be related to container identity, location, time and custody.
Seal and Manifest Should Agree Where the Process Requires It
Some transport and customs processes carry seal numbers in cargo, container or booking records.
If manifest or transport data says Seal 1001 and the physical container carries Seal 2002, the discrepancy should be reconciled before downstream users inherit it.
Article 118, Cargo Manifest, provides the transport-level record context.
Seal and Container Identity Should Never Be Swapped Independently
Reassigning a container to another booking while leaving the old seal relationship in a spreadsheet creates a silent identity conflict.
Container change, seal change and shipment change should be reconciled as one controlled state transition where they interact.
Seal Integrity Can Support High-Value Cargo Without Replacing Route Security
A seal can reveal opening. It cannot prevent route hijacking, identity fraud or cargo theft through every attack path.
High-value logistics may also require:
- secure facilities;
- limited information exposure;
- approved routes;
- vehicle tracking;
- driver controls;
- parking rules;
- incident response.
Seal integrity is one layer in the security architecture.
Seal Integrity Can Support Claims Evidence
A receiver finds a shortage.
Seal evidence can help narrow questions:
- did the expected seal arrive intact?
- was the seal number correct?
- was there an authorised replacement?
- did the shortage likely exist before sealing?
- does the custody chain contain an unexplained opening?
The seal does not establish the shortage cause by itself. It contributes one physical-evidence layer to Article 112, Logistics Claims.
Seal Metrics Should Measure Control, Not Just Use
- seals issued versus used;
- unaccounted unused seals;
- seal-number transcription errors;
- seal mismatch at handoff;
- broken or missing seals;
- replacement seals by reason;
- containers opened under authorised inspection;
- cases with missing replacement history;
- seal-related security incidents;
- percentage of defined checkpoints verifying seal state.
“100% of containers sealed” is weak if the seal numbers are not controlled or checked.
Worked Example: The Seal Number Does Not Match
The following is hypothetical.
Container C-44 leaves origin recorded with Seal S-9012.
At destination, receiving observes Seal S-9072. The seal appears physically intact.
A weak process says: seal is intact, open the container.
A stronger process places the container in the applicable controlled exception state and checks:
- origin photograph and seal scan;
- carrier handoff records;
- customs or inspection events;
- manifest / booking updates;
- messages about authorised seal replacement.
The investigation finds that customs opened the container at an intermediate port, recorded the examination and applied S-9072. The replacement message failed to reach the receiver’s system.
The seal mismatch was real. The cause was an information handoff failure, not unauthorised tampering.
The repair updates the shipment history with S-9012 → customs inspection → S-9072 and fixes the missing message route.
Seal Integrity at Three Zoom Levels
One container or trailer
Is the observed current seal the expected seal, correctly applied to an intact closure, with a traceable history?
One facility
Are unused seals controlled, application verified, mismatches held and replacements recorded without creating undocumented physical openings?
One network
Can seal state survive shipper, carrier, terminal, customs and receiver handoffs strongly enough that authorised openings and unexplained changes remain distinguishable?
A Singapore Lens
Singapore handles very large transshipment flows across port terminals, customs interfaces, hauliers and regional distribution. Seal state can therefore pass through several organisations even when a container spends little time in the domestic logistics network.
The value of a seal in such a hub is not merely closure. It is continuity of a simple physical security signal across a complex multi-party journey.
Hostile Test: “The Seal Is Intact, So the Cargo Is Secure”
Is it the expected seal? Was the transport unit inspected before sealing? Were unused seals controlled? Could the cargo have been wrong before sealing? Was there another access path? Did temperature or physical damage occur?
An intact seal supports one narrow claim. Strong logistics keeps that claim narrow.
Seal-Integrity Audit
- What seal standard or programme requirement applies?
- Is the transport unit inspected before stuffing?
- Are door and locking mechanisms sound?
- Are unused seals stored securely?
- Are seal serials inventoried?
- Who may issue seals?
- Who may apply seals?
- Is container / trailer identity confirmed at application?
- Is the seal number captured accurately before departure?
- Is correct physical engagement verified?
- At which handoffs must seal state be checked?
- What happens if the seal is missing, broken or mismatched?
- Who may authorise opening?
- How is replacement recorded?
- Does the old seal remain in history?
- Does manifest or booking data carry seal information where relevant?
- How are electronic-seal device failures distinguished from real openings?
- Do seal discrepancies feed security and process improvement?
Evidence and Further Reading
ISO 17712:2013 is the current published international standard for mechanical freight-container seals and remains confirmed after its 2023 systematic review. U.S. Customs and Border Protection’s current CTPAT programme and its minimum-security criteria provide an operational example in which high-security seals are combined with container inspection, controlled seal distribution, seal-integrity procedures and compromise reporting. These CTPAT requirements apply to the programme’s covered U.S.-trade context and should not be presented as universal rules for every shipment.
Return to the Logistics Hub
Seal integrity makes a closed transport unit carry a traceable physical custody signal. Return to How Logistics Works for the complete mechanism. Continue next to Loading Sequence | How Order Inside the Vehicle Shapes Every Stop After It.
Final compression: seal integrity is not the strength of one metal or plastic device. It is the continuity of a closure claim across selection, issue, application, number capture, custody, verification and authorised replacement. The seal becomes useful evidence when the network can say which seal should be present, why it changed if it changed, and what an intact or broken seal actually proves—and what it does not.