Cargo damage in transit: how to document the condition of a shipment

Every delivery leaves a paper trail: a CMR consignment note, a delivery note, a signature at the gate and, almost always, three or four photographs taken in a hurry on the dock. Nobody looks at any of it as long as the load arrives intact.

It comes out of the folder the day the goods arrive broken, and that is when the file starts to deflate. In disputes over cargo damage in transit, dock photographs get attacked on date, place and file integrity. The carrier does not have to prove they are false. It only has to make it plausible that they could be, and the clock is running while that argument runs.

So the question is how, not whether. Proof of cargo condition holds against the carrier, the insurer and the court only if it is created at the moment of handover, with a qualified timestamp, certified location and an immutable fingerprint of the content, and only if the same procedure runs on every dock.

Proof of cargo condition is the body of evidence showing what state the goods were in when they passed from one party to another: from sender to carrier at loading, from carrier to consignee at delivery. It cannot be built in an office or reconstructed afterwards. It is created on the dock, inside a window of a few minutes, and it records an event that will not repeat itself. Article 17 of the CMR Convention builds the whole of carrier liability on those two moments: the carrier answers for total or partial loss and for damage occurring between the time it takes the goods over and the time of delivery, unless it proves one of the exonerating circumstances the Convention allows. The liability engages almost by itself, on one condition: that whoever claims the damage can show the goods were sound when they left.

Where the evidence is actually created

Evidence is not created in litigation, nor in the letters that follow the damage. It is created at takeover and at delivery, and if nothing verifiable was recorded there, the gap never closes.

The context does not help. In the 2025 cargo crime report by BSI Consulting and TT Club, 634 incidents were reported in June 2025 alone across Europe, the Middle East and Africa, with intrusion accounting for two thirds of episodes by mid-year. Set that against the volumes in the Eurostat road freight statistics and the arithmetic is unpleasant.

Who has to prove what when goods arrive damaged

A claimant going against the carrier has to establish that the goods were handed over sound, that they were delivered in deteriorated condition, and how much the damage is worth. Once those are on the table, article 17 of the CMR Convention shifts the weight.

This is liability by receipt. The carrier answers for the simple fact of having taken the goods over, and to escape it has to prove something positive: neglect or instructions of the claimant, inherent vice of the goods, or circumstances it could not avoid. Article 17(4) adds special risks, defective packing and loading by the sender among them, and article 18 says who carries the burden at each step. Asserting that the work was done properly is no defence, here or under most national regimes.

Roles matter here. The sender loads and declares, the carrier undertakes to hand the goods back as it received them, the freight forwarder contracts in its own name on someone else's account, and only the consignee can enter reservations when they count. The weak link is the first: the condition of the goods at takeover is what almost nobody documents.

Reservations on the CMR consignment note and the delivery note

Reservations on a CMR consignment note are the notes the consignee enters at delivery to record loss or damage to the goods. They identify the package concerned, the type of defect and the quantity. Without reservations, the goods are presumed received in the condition the note describes.

A reservation binds the carrier only if it is specific and timely. Article 30 of the CMR Convention sets two regimes. Where the damage is apparent, the consignee has to enter the reservation at the moment of delivery, before or while taking the goods over. Where an external examination does not reveal it, the consignee has seven days from delivery, Sundays and public holidays excluded, and the notice has to be in writing. For delay the window stretches to twenty-one days. A generic entry of the "goods received subject to inspection" variety achieves close to nothing: the other side reads it as boilerplate, and a court has little to anchor a finding to. To hold, the entry has to name the pallet or package involved, the defect observed and the number of packages affected, and it should travel with the images that document it.

A unilateral reservation is enough: the carrier need not accept it, provided it arrives at the time of delivery. Where the damage is material, article 30 also lets either party require a joint inspection, worth activating before the vehicle leaves.

Digitalisation moves the problem without solving it. With the electronic consignment note introduced by the e-CMR Additional Protocol, reservations become entries visible to every party in real time, but an entry describes a defect, it does not prove one. TrueScreen supplies the photographic evidence that travels with the reservation, turning a completed e-CMR field into a documented claim for damaged goods in transit, on the logic of a certified transport document.

Why the deadlines matter more than the damage itself

A serious loss notified late is worth less than a minor one notified properly. Time bars operate regardless of the merits, and they close more cargo damage claims than any argument about the goods.

The deadlines for challenging damage to the load are shorter than the time it takes to quantify it. Article 30 of the CMR Convention gives the consignee seven days, Sundays and public holidays excluded, to send written notice of damage that was not apparent at delivery, and requires an immediate reservation for damage that was. Article 32 then sets a limitation period of one year for actions arising out of carriage, raised to three years where the damage was caused by wilful misconduct or by a default that the law of the court seized treats as equivalent. Most national road carriage regimes follow the same pattern with numbers close to these: an immediate reservation for visible damage, written notice within roughly a week for concealed damage, and a limitation period measured in months rather than in the years a commercial dispute usually takes.

Which column applies turns on one distinction. Apparent damage is what the eye catches at the tailgate: torn film, crushed corners, an opened case. Concealed damage is what an external examination does not reveal, because the packaging is intact and the contents are not, or because the harm sits in something invisible such as temperature. That is the harder half of the file, and its week starts running while the goods are still being counted in.

Why an ordinary photograph does not survive the carrier's challenge

A photograph taken with a company phone documents what was in front of the lens perfectly well. What it does not establish is who was standing there, when, or where. Those are the elements a carrier builds its defence on, and a JPEG vouches for none of them.

The angles of attack: who, when, where

The challenge runs in the same order almost every time. The when comes first, because EXIF metadata can be rewritten with any photo editor and the recorded time comes from the device clock, which anyone can move without leaving a trace. Then the where, since location data may be missing, imprecise or edited. Then the who, because nothing in the file connects the image to an identified person.

A fourth angle gets less attention: integrity. Between the shot and the day it is produced in evidence, the file passes through messaging apps, email and shared folders, and every hop is an opening to argue the content is no longer what it was. Which is why you certify a photograph with legal value before the file starts moving. The challenge on date and place can be neutralised with TrueScreen, which ties the time to a qualified timestamp rather than to the phone's clock.

The evidential weight of electronic records

A digital photograph is not a document in the classical sense. It is an electronic record, and it is treated under its own rules.

Article 46 of the eIDAS Regulation (EU) 910/2014 provides that an electronic document shall not be denied legal effect or admissibility as evidence in legal proceedings solely on the grounds that it is in electronic form. The rule removes one objection and leaves the harder one standing: the other side remains free to dispute that the record shows what it is offered to show. In practice a well-founded challenge rarely argues forgery. It argues that nothing in the file ties the image to a verified time, a verified place or an identified person, and that the content may have changed after capture. Article 41 of the same Regulation points at the answer, giving a qualified electronic time stamp a presumption of accuracy as to the date and time it indicates and of integrity of the data it is bound to.

The rules do not soften outside a courtroom. A loss adjuster runs the same checks a carrier's lawyer would, and most recovery files settle there. The more an image can be verified at source, the less room the objection has: the practical value of digital provenance.

What the damage is actually worth and when the carrier loses the cap

Compensation almost never tracks the commercial value of the goods. Article 23 of the CMR Convention caps it at 8.33 SDR per kilogram of gross weight short. On a 600 kilogram pallet the ceiling sits at roughly 5,000 SDR whatever the invoice said, and that is where most of the money in a cargo claim is won or lost.

The ceiling does come down, but only one way. Article 29 removes the carrier's right to rely on the limiting provisions where the damage was caused by wilful misconduct, or by a default the law of the court seized treats as equivalent. That is where dock documentation starts to be worth real money: default of that order is proved with circumstantiated facts, and those facts were either recorded at the time or they do not exist.

How to document the condition of a shipment so the evidence is enforceable

Documenting means producing records that someone will check months later, not photographs parked in a folder on a shared drive. ISO/IEC 27037, the international standard on handling digital evidence, organises the work into four processes, identification, collection, acquisition and preservation, and holds them to three principles: auditability, repeatability and reproducibility. It also separates physical custody from logical custody, entrusted to hash values, electronic seals and qualified timestamps, and from documentary custody, the registers and access trails. On a dock that is the skeleton of a digital chain of custody.

What to capture at loading and what to capture at delivery

The two acquisitions serve opposite purposes. At loading you build positive proof of integrity, which carries disproportionate weight because hardly anyone collects it. At delivery you prove the deterioration and document the reservation.

When the damage is already visible on the dock, the sequence runs:

1. Stop handling the load and leave damaged packaging exactly as delivered.
2. Photograph the whole consignment before any partial unloading takes place.
3. Enter a specific reservation naming package, defect observed and quantity affected.
4. Have the driver countersign the reservation before leaving the yard.
5. Capture close-up images with certified date, time and location.
6. Send written notice within seven days for damage not apparent at delivery.
7. Keep the goods and packaging until a joint inspection has taken place.

Warehouse teams use TrueScreen to capture the condition of the load at loading and at delivery, producing enforceable evidence without changing the dock routine.

Two concrete scenarios: a pallet of household appliances and a refrigerated load

Twenty-two pallets of household appliances leave an Italian plant for a German distributor. At departure the warehouse operator captures six sealed images: the loading space, the four sides of pallet 14 with straps in place and film intact, and the label carrying the batch number. At delivery the consignee finds the film torn and two cartons crushed, on pallet 14 exactly, enters a reservation on the CMR consignment note naming the pallet, the defect and the number of packages, and captures the matching images. The carrier later challenges the date of the departure photographs, which carry a qualified timestamp and the coordinates of the loading yard. The challenge stops there. It is certified shipment evidence applied to a recurring flow.

The second scenario is more awkward. A refrigerated load arrives with perfect packaging and compromised product: the argument is not about how the goods look but about the actual temperature and when it was recorded. The useful evidence is a capture of the reefer display and the probe records, at loading and at delivery. Nothing was visible at the tailgate, so the concealed damage regime applies with its seven-day notice under article 30, and in that week the difference is made by what was collected before.

How certified proof of cargo condition is captured

TrueScreen, the Data Authenticity Platform, captures photographs and videos of the load and seals them at the instant of capture with a qualified timestamp, certified geolocation and an immutable fingerprint of the content. What separates this from an ordinary photograph is when the guarantees come into being: they are not added to a file that already exists, they are bound to the content before any transfer, while the data has not yet left the device that generated it. The digital seal and the timestamp are issued by a qualified QTSP integrated into the platform and called at the moment of acquisition. The effect is measurable against the cap: article 23 of the CMR Convention limits compensation to 8.33 SDR per kilogram of gross weight short, and getting past that ceiling under article 29 requires proof of wilful misconduct or an equivalent default.

Acquisition produces a certified report carrying the date, time and position recorded at capture, ready to attach to the claim, the insurance file or the court record. The date comes from qualified electronic time stamps rather than the device, the place from certified geolocation sealed at the same instant. The record is born verifiable instead of authenticated after five pairs of hands.

Companies running recurring flows integrate TrueScreen via API into their transport management system, so every load produces its own evidence file automatically, through the app, the web platform or an SDK. For anyone in transport and logistics the result is fewer images in the archive and more that hold when somebody disputes them.