Ship agents are legally responsible for third-party cargo that passes through their facility. Proving what happened to that cargo is a different problem from tracking where inventory is. Digital parcel custody is the system that solves the proof problem.
Digital parcel custody is the chain of verified, timestamped, actor-attributed records that proves what happened to every parcel in a maritime port operation — from the moment it was received into the agent's care to the moment the captain signed for its delivery. It is distinct from warehouse management in one fundamental way: its purpose is legal proof, not operational efficiency.
A warehouse management system tells you where things are. A custody system proves who received them, who moved them, who stored them, who released them, and who confirmed receipt — with timestamps, actor identity, and a tamper-evident record that survives a P&I club investigation.
A ship agent receives parcels on behalf of a vessel owner, stores them, coordinates loading, and delivers them to a captain. Every step in that chain is a potential dispute. The tools most agents use — email, spreadsheets, paper manifests — produce no defensible record of any of it.
If a parcel is lost, damaged, or disputed after delivery, the agent is asked to prove what they did. A paper GDN and a vague memory of who handled it is not proof. It is the starting point of a claims process that typically runs 60–120 days.
Bonded cargo under customs hold cannot legally be delivered until the customs authority releases it. Without a system that enforces this gate, delivery happens because someone forgot, not because compliance was verified. The fine and the liability fall on the agent.
Port calls happen around the clock. The agent on duty at 06:00 is not the same person who received the cargo at 14:00 yesterday. The status of 40 parcels lives in someone's head. When they go on holiday, the status goes with them.
A WMS optimises where things are stored and how efficiently they move. A custody system proves what happened and who was responsible. These are different design priorities with different outputs.
| Dimension | Warehouse Management System | Digital Parcel Custody |
|---|---|---|
| Primary purpose | Track inventory location and quantity for ongoing warehouse operations | Prove a specific parcel moved through a specific custody chain, attributable to specific people, at specific times |
| Who needs it | Warehouse managers optimising throughput and storage utilisation | Ship agents who are legally responsible for third-party cargo and must produce a defendable record of every handoff |
| Legal purpose | Operational efficiency — inventory accuracy, cycle counts, stock-level visibility | Liability documentation — proof of receipt, proof of condition, proof of delivery, proof of compliance |
| Custody attribution | Not a primary concern — stock moves between zones anonymously | Every state change is attributed to a named actor with timestamp and device identity. Non-repudiation is a design requirement. |
| Bonded and regulated goods | Typically handled as a separate compliance workflow, not integrated | Customs compliance gates are built into the state machine — a bonded parcel cannot be delivered until the manifest is released |
| Proof format | Stock reports, cycle count sheets, pick-and-pack records | Goods Delivery Note (GDN) with integrity hash, full audit export structured for P&I club submission |
Not every digital tool that tracks parcels qualifies as a custody system. These five properties are the difference between a record that satisfies an auditor and one that does not.
Every state change records who did it — not just a team or a role, but a specific named user with their organisational identity.
Receipt, custody transfers, and delivery times are locked into the record at the moment of action. They cannot be edited retroactively.
A parcel can only move through defined legal transitions. A parcel cannot jump from RECEIVED to DELIVERED without passing through IN_WAREHOUSE and STAGED. Bonded goods cannot be delivered without a released customs manifest.
The captain's confirmation is not a signature on paper that can be lost or disputed. It is a digital record with timestamp, identity, device fingerprint, and the exact parcel set that was confirmed.
The GDN is generated from the immutable custody chain and carries an integrity hash. Any alteration after generation is detectable. The document proves its own authenticity.
These are not hypothetical scenarios. They are the situations that drive ship agents to evaluate SeaPillar.
The agent has a paper GDN, possibly a photograph. The captain has a different recollection. The P&I club investigation takes 90 days and resolves on the better documentation — which is usually neither.
The audit export shows: every parcel received, every state change, the captain's digital confirmation with timestamp and IP address, and the GDN integrity hash. Resolution is a 10-minute document export.
No system stopped it. The compliance officer finds out when the authority audits. The fine is assessed against the agency. The agent cannot demonstrate what their process was.
The system enforced a hard gate. The parcel state cannot transition to DELIVERED while the customs manifest is in any state other than RELEASED. The gate is in the audit trail. Compliance is demonstrable.
The warehouse log says it was received. The consignee says it wasn't. The paper trail is ambiguous. The agency absorbs the cost or the relationship.
The receipt record shows: timestamp, operator identity, photo evidence at intake. The custody chain shows every subsequent state change. If the parcel was received, that is provable. If it was not, that is equally provable.
The status of 40 parcels lives in their head, their email, and a shared spreadsheet that nobody else has been maintaining. The handover is a phone call and a prayer.
Every parcel has a live status visible to every authorised user. The incoming agent opens SeaPillar and sees exactly what was received, what is in warehouse, what is staged, what is bonded, and what still needs customs clearance.
Designed for ship agents, not adapted from generic WMS software.
Ready to evaluate?
We identify where your current process leaves liability gaps — disputed deliveries, bonded compliance, chain-of-custody handovers — and show you exactly how the custody chain closes them.
