Who Holds the Company Seal? Seal Custody and Control

There is a question that most small and mid-sized companies never ask out loud until the day it becomes urgent: where, exactly, is the company seal right now?

Sometimes the answer is reassuring — a locked drawer, one named person, a logbook. More often it is something like: "I think Maria has it." Or: "It's in the office manager's desk, second drawer, the key is on the hook." Or, for digital seals, the answer that should worry you most: "The PNG is in the shared drive, everyone can get to it."

This is worth taking seriously, because a seal is a strange kind of object. It carries the company's authority, but it has no opinion about who is holding it. A rubber stamp presses the same mark whether the hand belongs to the founder or to a contractor who started last Tuesday. A seal image file is worse: it can be copied a thousand times with no trace, and every copy is identical to the original.

Design gets all the attention — what shape to use, which font, what shade of red. But in practice, very few disputes start because a seal looked wrong. They start because a seal was used by someone who should not have used it, on a document nobody reviewed, and nobody can now reconstruct when or why.

This guide is about that second problem.

Custody is a design decision too

Start by naming what the seal actually is in your organization. It is not a logo and not decoration. It is a delegation of authority in physical form. Whoever can reach it can, in practical terms, make the company appear to have agreed to something.

That framing leads to one useful rule: the person who holds the seal should not be the person who decides to use it. If the same person both approves a contract and stamps it, the seal adds no control at all — it is just a red mark confirming a decision that person already made alone.

In most companies this separation is easy to arrange and costs nothing:

The approver is whoever has the authority to commit the company — a director, a partner, a department head, depending on the amount and the subject.
The custodian is an administrative person who keeps the seal, checks that an approval exists, applies the seal, and records it.

The custodian's job is not to judge whether the deal is wise. It is to confirm that someone with authority said yes, and to leave a trail. That is a modest, boring, extremely effective control.

Splitting seals so no single mark does everything

Companies in mainland China arrive at this problem from the other direction: instead of one seal with a custody policy, they typically maintain several seals with different scopes — a company seal, a contract seal, a finance seal, an invoice seal, and a legal representative's personal seal. Each one is held by a different function. Finance keeps the finance seal; the general office keeps the company seal; the legal representative's seal is often kept separately again, precisely because the combination of finance seal plus legal representative seal is what moves money.

You do not need to be a Chinese company to borrow the logic. The useful idea is that a seal's blast radius should match its custody. If one mark can open bank accounts, sign leases, certify HR letters, and approve payments, then whoever holds it holds everything. Splitting into two — one for contracts and external commitments, one for routine administrative documents such as employment verification letters and address confirmations — means the everyday seal can live with the office administrator while the serious one stays locked up. Types of company seals walks through the common variants in more detail. Below the company level, a team mark can carry routine work without borrowing the company seal's authority; the department seal guide covers how to design one that can't be mistaken for it.

Korea formalized the same instinct differently. Korean companies commonly register one corporate seal (인감) with the court registry and then use a separate "use seal" (사용인감) for day-to-day business, precisely so the registered seal rarely leaves the safe. Japan makes a comparable distinction between the registered jitsuin and the everyday mitomein. These are three different legal cultures reaching for the same structural answer: keep the powerful seal rare, and give routine work a lesser one.

The seal register: boring, and the single highest-value habit

If you adopt exactly one practice from this guide, adopt this one. Keep a log of every use of the company seal. A notebook works. A spreadsheet works better. Five columns is enough:

Date the seal was applied.
Document — title and counterparty, specific enough to find it later ("Service agreement — Hartley Logistics," not "contract").
Requested by — the person who brought the document.
Approved by — who authorized it, and how (email, signed memo, standing policy).
Copies stamped — how many originals were sealed, which matters more than people expect.

Add a sixth column for the custodian's initials if more than one person ever handles the seal.

Why this small habit pays off so well: it converts an invisible act into a record, and the mere existence of the record changes behavior. A person who would casually ask for a stamp on an unreviewed document behaves differently when they know their name goes in a book. And when a dispute does arrive eighteen months later, the register answers in thirty seconds what would otherwise take a week of email archaeology.

Keep the register with the seal, not in a separate system. The point is that reaching for one means reaching for the other.

Digital seals break the old model

Everything above assumes a physical object that can only be in one place. Digital seal images do not behave that way, and pretending otherwise is how organizations get into trouble.

A transparent PNG of your company seal can be forwarded, screenshotted, lifted out of a PDF, or dropped into a group chat by someone with entirely good intentions. Once that happens, there is no calling it back. So custody for digital seals is less about possession and more about distribution discipline.

A few practices that hold up in real offices:

Keep one master file, and keep it out of circulation. The high-resolution master — the source you would regenerate from — lives in a restricted folder with a named owner. It is not the file people use day to day. The seal file management guide covers naming and versioning in depth.

Distribute flattened, use-specific exports. Give the accounts team a seal export sized for invoices, and the contracts team one sized for signature blocks. Smaller, purpose-built files reduce the temptation to pass around the master.

Prefer stamping over sharing. Where you can, have documents come to the seal rather than the seal go to the documents. If one person applies the seal using a PDF stamping tool and returns the finished file, the image never leaves their machine. This is the digital equivalent of a custodian with a locked drawer, and it is the single biggest structural improvement most teams can make.

Flatten what you send out. A seal placed as a separate layer in a PDF can often be dragged out again. Flattening merges it into the page so the recipient receives an image of a sealed document rather than a reusable asset.

Never email the seal file as an attachment "just this once." This is how seal images end up in inboxes of people who left the company three years ago. If someone genuinely needs it, put it somewhere access-controlled and revocable.

Handover: the moment most controls quietly fail

Seal custody is usually set up once and then never revisited — which means it survives exactly until the custodian changes jobs, goes on parental leave, or is out sick during a closing.

Write down a short handover routine while nothing is going wrong:

Physically transfer the seal, the key, and the register to the incoming custodian, and note the transfer in the register as its own dated entry.
Confirm the old custodian no longer has access to the digital master folder. Removing a person from a shared drive is a two-minute task that is forgotten roughly always.
Check whether any seal image files sit in the departing person's personal cloud storage, downloads folder, or email sent items. You may not be able to guarantee deletion, but you can ask, and you can record the answer.
If the departure was not amicable, treat the seal design itself as compromised and consider regenerating it. Recreating a digital seal takes a few minutes in the seal generator; recreating trust in a seal that walked out the door takes considerably longer.

For sole traders and very small teams, the practical version of this is different but not absent. If you are the only person who ever uses the seal, your handover problem is a continuity problem: if you lose the laptop, can you reproduce the seal exactly? Keep the master file backed up somewhere you can reach from a different device, and keep a note of the exact text, font, and dimensions. The freelancer and small business guide covers this lighter-weight setup.

When a seal is used without authority

Assume it will happen at some point, in some small way — a junior employee stamps a routine letter to be helpful, a former contractor still has last year's PNG, a vendor reuses a sealed page from an expired quote.

The instinct is to keep it quiet. The better instinct is to be specific and quick:

Establish what was sealed and when. This is where the register earns its keep. If you have one, you can state with confidence which documents were properly authorized — which is often more important than identifying the one that was not.

Preserve the evidence before changing anything. Keep the file, the email, the scan, with its original timestamps. Do not crop it, re-save it, or "clean it up."

Tell the counterparty in writing, plainly. A short, factual notice that a particular document was sealed without authorization is far better than silence, and it starts a clock.

Then change the seal. A new design — different ring text, an added date element, a changed security code — makes the leaked image visibly stale. Tell the parties you deal with regularly that a new seal is in use from a given date, and keep an image of the retired one on file so old documents remain interpretable.

What a seal image can and cannot do on its own is worth understanding before you panic or over-promise: are image seals legally valid covers the distinction between a picture of authority and a legally binding electronic signature, and electronic seal vs. electronic signature goes further into cryptographic options. If real money or real liability is involved, this is a conversation for a lawyer in your jurisdiction, not a blog post — including this one.

A version small enough to actually adopt

Most seal-management policies fail because they are written for a company with a compliance department. Here is the version that fits on one page and survives contact with a nine-person business:

One named custodian, one named backup. Written down, not assumed.
The custodian is never the approver.
Every use goes in the register, no exceptions for urgency.
The high-resolution master file lives in one restricted folder.
Documents come to the seal; the seal file does not travel.
Outgoing PDFs are flattened.
Handover has a checklist, and the checklist includes revoking digital access.
A compromised seal gets replaced, not argued about.

None of this requires software, a budget, or a policy document with numbered clauses. It requires deciding, once, who holds the thing — and then writing down what happens every time it touches a page.

The seal itself is the easy part. You can design one in a few minutes, pick a template close to what you need, and export it at whatever resolution your documents demand. The hard part, and the part that actually determines whether the seal means anything, is the quiet administrative discipline around it. A beautiful seal in an unlocked drawer is a liability with good typography.