Controlled Substance Delivery Tracking, Built for Chain of Custody

Most delivery-tracking software exists to make dispatch faster. Controlled substances need something else: proof — a record that holds up when a DEA auditor, not a customer, is the one asking where a package went.

What a defensible chain of custody actually requires

Whatever software a pharmacy uses for controlled-substance deliveries, the underlying requirement is the same: an unbroken, time-stamped record from the moment a controlled substance leaves the pharmacy to the moment it's signed for at the door. In practice that means capturing, for every stop:

• A tamper-evident seal, scanned at pickup and again at delivery
• GPS-verified location for every stop, not just a delivered/not-delivered flag
• A signature captured at the door, tied to that specific stop and timestamp
• One continuous audit trail — not a paper log in one place and a delivery app in another
• A record a pharmacy team can actually pull up on demand, not one buried in a driver's personal phone or a third-party courier's system they don't control

This is general practice, not legal advice — confirm your own DEA registration and state board requirements with your compliance counsel.

How Steward handles it

Steward is ElevateRx Health's pharmacy delivery platform, live in production today. It's built offline-first as a progressive web app, so a driver who loses signal mid-route keeps recording normally and the record reconciles the moment the phone reconnects — a dead zone doesn't create a gap in the trail. Seal, scan, signature, temperature, and waste all write to one DEA-ready record instead of living in separate tools.

Day to day, that's dispatch, live GPS tracking, e-signature capture at the door, and Tap to Pay on iPhone for cash-on-delivery stops — with the controlled-substance chain-of-custody trail running underneath the whole route, from pickup to the door.

Access control that matches how a pharmacy actually works

Sign-in is a 4–6 digit PIN, not a password every driver has to remember — access is role-scoped per organization, with a 15-minute idle auto-logout across the platform. That's the same identity layer every ElevateRx Health tool shares, so a delivery record and everything else in the platform sit behind one consistent access model, not a patchwork of separate logins.

Built by pharmacists, not sold to them

ElevateRx Health was built by two PharmDs — Richard Black and Justin Messenger — out of a pharmacy consulting practice, not a generic logistics-software company that added a pharmacy vertical page. The chain-of-custody requirement in Steward isn't a compliance checkbox added after the fact; it's the reason delivery was the first tool built.