Evidence custodians examine both physical and digital evidence that comes in on a daily basis, ensure their packaging and encryption, give storage locations, maintain chain of custody records for any transfer to the courtroom or laboratory, conduct inventory audits, and undertake court ordered destruction of property.

To work as an evidence custodian, one is expected to have either a high school diploma and a degree in either criminal justice, business administration, or information technology. The skills needed include a keen eye for details, understanding of chain of custody laws, inventory database management experience, CJIS security requirements understanding, and certification from associations such as IAPE.

Unlike physical evidence management—which involves organizing warehouses, maintaining physical security, handling tamper-evident packaging, and managing shelf space—managing digital evidence focuses on cloud storage administration, integrity verification using cryptographic hashing (such as SHA-256), access management, redacting protected information, and automating digital retention schedules.

Evidence custodians monitor statutory retention schedules, which include state regulations and court orders. Custodians do not dispose of evidence on their own; rather, they assess case dispositions together with the prosecutor, investigators, and court clerks. Evidence custodians dispose of evidence after getting formal disposition authorization that states all time windows for trials, appeals, and post-convictions are over.

Custodians ensure a digital chain of custody through digital evidence management systems. Once a file enters the system, it is automatically assigned a cryptographic hash to guarantee authenticity. The system then automatically logs every action performed on the file, including viewing, downloading, sharing, and redaction, along with the specific user credentials and an exact date and timestamp.