Loading dock security: the one boundary where custody actually transfers 

Loading dock security is the set of controls that govern how a vehicle is admitted, docked, unsealed and released at a warehouse ramp. It matters because at the dock, third-party goods stand still, the vehicle is open and custody changes hands. Your service commitment is live, so you own the evidence of what happened.

Key Takeaways

• Facility theft is now a leading recorded category in TAPA EMEA reporting, but incident counts do not show who held custody of the goods when each attack happened.
• The dock is the one point on a site where third-party goods stand still, the vehicle is open, custody is transferring and your service commitment is live.
• A seal number that does not match is the one check with no tolerance: do not open, raise a high-priority alarm and escalate, and investigate before involving the police.
• After an incident you must be able to show who held custody, in what state and on whose authority. Retention periods depend on law, contracts and insurers, not on a fixed norm.
• Start by mapping custody at each dock, then test what happens today when a seal number does not match.

Where has cargo security effort gone, and what do the incident data now show? 

European logistics has put most of its security effort into the road, and for good reason. Secure parking, driver procedures, telematics, route risk management and transit insurance all protect a loaded vehicle in motion or at rest. TAPA EMEA’s incident base reflects that emphasis: theft from vehicles is the largest reported road freight category in the three years to September 2025. 

The road is not the whole picture. In TAPA EMEA’s December 2025 reporting, theft from a facility was the largest single crime category, with 268 of 557 incidents, or 48.11%. The same dataset shows 73.79% of crimes involved break-ins. Intrusion-based methods accounted for 66.5% of EMEA incidents as of mid-2025, and Germany leads the country rankings, with 27% of European cargo thefts in the 2025 BSI and TT Club report. 

Two cautions apply. These are reported crimes from TAPA members, so they capture only part of what happens. The largest dataset also has a gap: of the 157,421 cargo crimes TAPA EMEA recorded across 129 countries between 2022 and 2024, fewer than 6% included a loss value. None of this proves that dock theft outweighs transit theft. It supports a narrower claim: facility theft is now a leading recorded category, and incident counts do not say who held custody of the goods when each attack happened. That missing detail is why the dock deserves its own focus. 

Why is the dock different from the road? 

The dock is the one point on your site where four conditions coincide: third-party goods stand still, the vehicle is open, custody is transferring and your service commitment is live. An open ramp without control is an open warehouse, because the ramp is the physical interface between the outdoor area and the interior. 

Compare two cases. A load is taken from a roadside lay-by at three in the morning. Much of the exposure sits with the carrier, and an established ecosystem exists to manage it. Now a load is taken at your ramp. It happens inside your perimeter, during a controlled handover, while your commitment to the shipper is live. The goods may not be yours. The access decision, the process and the evidence are. 

The legal position needs care. Your duties depend on the contract, the applicable transport law and the point where responsibility passes under the agreed terms. Liability may be shared or transferred. One thing holds in every case: at the ramp you control access, documentation, seal status, dwell time and the environment in which someone else’s goods are handled. Even where contractual liability moves elsewhere, you still own the record of what happened at that boundary. 

The yard matters too, as a separate zone with separate controls. A correctly admitted vehicle can stand unchecked in the yard for hours or days. Admission, yard holding, the dock and the warehouse interior each need their own decision point. Nobody without valid authorisation should cross any of them, whether by tailgating or by technical manipulation. 

What does a controlled loading dock look like? 

A controlled dock answers five questions in sequence. The table sets them out as a layered model, and each layer fails differently. 

Layer	Typical controls	Question answered
Identity	Booking, driver identification, vehicle plate, carrier validation	Is this the expected arrival?
Access	Gate decision, yard routing, docking confirmation	Is this vehicle authorised to reach the ramp?
Physical	Dock interlock, door state, vehicle presence sensor	Can the ramp open only when it is safe?
Custody	Seal number, seal photograph, document reconciliation	Does the physical handover match the record?
Evidence	Timestamped decision log, CCTV, exceptions, overrides	Can the event be reconstructed afterwards?

The physical layer is where cameras stop being enough. A camera records the ramp. It does not reconcile the seal against the document, hold the door shut until the vehicle is docked, or keep the driver out of the warehouse. The controls that close a ramp are interlocks and process separation: the door opens only once a docking sensor confirms the vehicle is in position, and it cannot be opened from the inside without that signal. If the vehicle pulls away without clearance, the door closes and an alarm is raised. The driver waits in a monitored area apart from the warehouse while warehouse personnel handle the load. The seal is photographed and recorded at opening and again at sealing. 

Fraud sits in the identity layer, and it is hard to count. Identity-fraud methods may not be recorded as physical break-ins even when the loss is substantial, according to Trans.INFO’s analysis of TAPA EMEA data. The same analysis puts documented cargo crime losses in six main European market groups at more than €860 million across 30,543 incidents in 2024 and 2025. It says the total is likely understated, because most reports carry no loss value. None of that is specific to the dock, and no incident-level data shows how much of it reaches the ramp. It does show why you should validate the carrier and reconcile the booking before a vehicle gets near a door. 

Why is a seal mismatch the one check with no tolerance? 

Because it directly challenges the integrity of the custody handover. In a risk-based gate model, almost every check resolves through weighted tolerances: a confidence score, not a pass or fail. A misread licence plate, a time window missed by half an hour and an unreadable seal photograph are all handled by scoring, supervisor review or a documented exception. Rigid thresholds would block legitimate operations, so the design deliberately forgives most things. 

A seal number that does not match is the exception. The hard control is: do not open. No unsealing, no loading, a high-priority alarm, and escalation to security management. 

One caution keeps this rule credible. A mismatch triggers investigation first, not automatic police involvement. The cause may be a data entry error, a wrong booking reference, a replaced seal or a compromised seal. Police notification follows your site’s escalation protocol and local legal requirements. The seal rule is a stop, not a verdict. 

Industry standards support the rule. TAPA FSR 2023 sets requirements for documented seal control procedures, ISO 17712 certified seals, and seals affixed and removed only by authorised personnel. Drivers are excluded except under a specific exemption. It also requires dock doors to be closed and secured when not in use, alarmed against intrusion and covered by CCTV. Which requirements apply to your facility depends on the certification level and scope you pursue, so check the standard itself rather than a summary. If you pursue FSR certification, the yard and the dock become a documentation question. 

What must you be able to show after an incident at the dock? 

You must be able to show who held custody, in what state and on whose authority. Custody transfer is an evidential event as well as a security event. Afterwards, the shipper, the insurer and sometimes the police ask about seal state, dwell time, who was present, what was authorised and what was overridden. 

Retention is where this becomes concrete. In one reference design, seal photographs and the expected-versus-recorded seal number are kept for 12 months for liability, insurance and audit purposes. Ramp CCTV is kept for 30 days under a works agreement, and footage connected to an incident is placed under legal hold. These periods are design examples, not industry norms. The correct period depends on GDPR purpose limitation, national law, contractual requirements, insurer expectations and your incident response procedure. Document scans such as CMR and delivery notes can fall under commercial record-keeping rules that run much longer, which differ by country. 

Evidence also has to survive failure. Store decisions taken while a central system is unavailable locally, and synchronise them afterwards. The audit trail then covers the outage instead of stopping at it. 

A small set of measures shows whether the dock is under control: 

• Percentage of dock handovers with a matched seal record. 

• Percentage of arrivals with complete driver, vehicle and booking validation. 

• Average ramp dwell time from docking to departure. 

• Seal mismatches, failed validations and overrides per 1,000 handovers. 

• Percentage of incidents where custody state can be reconstructed within a defined time. 

• Percentage of dock doors confirmed closed and secured when not in active use. 

These are measures to define and track, not benchmarks to quote. Set your own thresholds from your baseline. 

Which regulations bear on the dock, and who do they apply to? 

Two EU instruments are relevant, and they address different things. NIS2 covers cyber and supply chain security obligations, including governance, risk management and incident reporting, for in-scope entities. The CER Directive (2022/2557) addresses the physical resilience of critical entities, including transport. Neither mentions loading docks. The link is indirect: a dock is a physical control point, and its systems are networked. 

National positions differ, and they are still moving. Member States had to transpose NIS2 by 17 October 2024. Belgium’s law was adopted on 26 April 2024 and entered into force on 18 October 2024, one day after the deadline. Germany’s implementation act entered into force on 6 December 2025 with no transition period. France, the Netherlands and Spain had not notified full transposition, and on 8 July 2026 the Commission referred them to the Court of Justice for that failure. Check the current position before relying on any national date. 

Scope is entity-specific. Sector, size, service criticality and headcount all matter. Assess your own organisation, and keep both outcomes open until you have. 

Conclusion: where should you start? 

Loading dock security comes down to one question: can you show who held custody at the ramp, and on whose authority? Start by mapping custody, not incidents. For each dock, write down who holds the goods at each step from gate admission to departure. Note which decisions are made at each step, and which of them leave a record you could produce in a week. The gaps in that map are your exposure, whatever the incident counts say. 

Then test the one rule that should never bend. Ask what happens today when a seal number does not match, who can override it and where the override is recorded. If the honest answer is that it depends on the shift, you have found the first thing to fix. 

Finally, plan changes so you never take a live site offline to make them. Phased upgrades [link pending] let you start producing evidence before the whole programme is finished. 

See how operators approach loading dock security across their own sites

Discover our solutions

Frequently asked questions

What is loading dock security? 

Loading dock security is the set of controls that govern how a vehicle is admitted, docked, unsealed and released at a warehouse ramp. It covers identity checks, access decisions, physical interlocks, seal and custody records, and the evidence kept afterwards. 

Why is a seal mismatch treated differently from other dock checks? 

Most gate checks are scored against tolerances, so a misread plate or a late arrival can be handled as an exception. A seal number that does not match challenges the custody handover itself, so the dock does not open until the mismatch is investigated and escalated under the site’s protocol. 

What evidence should a dock be able to produce after an incident? 

You should be able to show who held custody, in what state and on whose authority. That means seal state, dwell time, who was present, what was authorised and what was overridden, retained for periods set by law, contracts and insurers rather than a fixed norm. 

Do NIS2 and the CER Directive apply to loading docks? 

Neither instrument mentions loading docks. NIS2 covers cyber and supply chain obligations for in-scope entities, and the CER Directive covers the physical resilience of critical entities, including transport. Whether either applies depends on your sector, size and service, so assess it for your own entity.