To lay a business records foundation, a custodian or qualified witness must testify to four things under Federal Rule of Evidence 803(6): the record was made at or near the time of the event by someone with knowledge (or from information transmitted by such a person), it was kept in the course of a regularly conducted business activity, making the record was a regular practice of that business, and these conditions are shown by the witness’s testimony (or by a Rule 902(11) or 902(12) certification).1Legal Information Institute. Federal Rules of Evidence Rule 803 Even when all four are met, the judge can still exclude the record if the opponent shows the source of the information or the circumstances of preparation indicate a lack of trustworthiness.
Everything else about getting business records admitted flows from those elements and that trustworthiness proviso. What follows is how each piece works in practice.
Who Counts as a Custodian or Qualified Witness
A custodian of records is the person officially responsible for maintaining and securing the organization’s files. A hospital’s medical records director or a bank’s compliance officer who oversees document retention are typical examples. The custodian knows where files are stored, who has access, and what policies govern how records are created, modified, and preserved.
A qualified witness is a broader category. This person does not need to hold a formal custodian title, does not need to have been present when the specific record was made, and does not even need to have worked for the company at the time. What matters is that the witness understands how the record-keeping system works: how data enters the system, what controls prevent errors or tampering, and why the business maintains these records as a regular practice. A supervisor hired after the record was created can serve as a qualified witness if they have learned the relevant procedures.
This flexibility is deliberate. Businesses merge, employees leave, and the person who typed a particular entry five years ago may be long gone. Requiring the original data-entry clerk would make many perfectly reliable records impossible to admit. The court cares whether the witness can explain the system, not whether they personally pushed the buttons.
One situation trips up attorneys: records created by one organization but held by another. Think of a medical provider’s billing records maintained by a third-party billing company. A witness from the receiving company can testify about their own record-keeping practices and how they incorporated the outside records, but foundation for the original creation often requires someone familiar with the originating company’s procedures too. Courts vary on how strictly they enforce this. The safest approach is a witness who can speak to both sides of the chain.
The Foundation Questioning Sequence
Practitioners sometimes use the mnemonic KRAP for the four points: the record was Kept in the regular course of business, making it was a Regular practice, the entry was made At or near the time of the event, and the recorder had Personal knowledge (or received the information from someone who did).
In practice, the attorney walks the witness through a sequence that checks each box:
- Identify the record. The witness confirms what the document is and which organization created it.
- Describe the system. The witness explains the record-keeping procedures, including how data gets entered and who is authorized to do so.
- Establish timing. The witness confirms that entries are made at or near the time the event occurs.
- Confirm knowledge. The witness explains that the person recording the information had firsthand knowledge, or received it from someone who did.
- Show regularity. The witness testifies that maintaining this type of record is a standard business practice, not something done specifically for the lawsuit.
After that testimony, the attorney moves to admit the exhibit. The opposing attorney then has the chance to object, most commonly on trustworthiness grounds. If the judge overrules the objection, the document becomes part of the evidence the jury can consider during deliberations.
The most commonly missed element is regularity. Attorneys focus so heavily on proving a record is accurate that they forget to establish that the record type is one the business routinely creates. Skipping any single element gives the opposing side an easy objection, so a written checklist is worth the small effort.
Using a Certification Instead of Live Testimony
Live testimony from a custodian is not always practical. Flying a records custodian across the country to spend five minutes laying foundation is expensive and disruptive. Rule 902(11) offers an alternative for domestic records: a written certification from the custodian or another qualified person stating that the record meets all the requirements of Rule 803(6). When properly executed, the certification makes the record self-authenticating, and no live witness has to appear just to lay foundation.2Legal Information Institute. Federal Rules of Evidence Rule 902 – Section: Rule 902. Evidence That Is Self-Authenticating
The catch is the notice requirement. Before trial, the party offering the record must give the opposing side reasonable written notice of the intent to use the certification and must make both the record and the certification available for inspection. The rule does not specify a particular number of days; it requires “reasonable” notice so the opponent has a fair opportunity to challenge the record. Some local court rules or case management orders impose specific deadlines, so checking the applicable rules in your jurisdiction matters.2Legal Information Institute. Federal Rules of Evidence Rule 902 – Section: Rule 902. Evidence That Is Self-Authenticating
The certification can take the form of an unsworn declaration under 28 U.S.C. ยง 1746, which allows the declarant to sign a statement under penalty of perjury rather than appearing before a notary.3Office of the Law Revision Counsel. 28 USC 1746 – Unsworn Declarations Under Penalty of Perjury Making a false declaration carries real consequences under federal perjury law.4Office of the Law Revision Counsel. 18 USC 1621 – Perjury Generally
Foreign Business Records
Rule 902(12) extends the self-authentication framework to foreign records, with an added safeguard. The certification must be signed in a manner that would subject the maker to criminal penalties in the country where the certification is signed. That requirement substitutes for the domestic perjury threat and ensures the foreign certifier has something at stake. As with domestic certifications, the proponent must give advance notice and make the record available for inspection before trial.2Legal Information Institute. Federal Rules of Evidence Rule 902 – Section: Rule 902. Evidence That Is Self-Authenticating
Hearsay Within Hearsay Inside a Business Record
This is where foundation efforts often fall apart. A business record itself may be admissible under Rule 803(6), but that does not automatically cover every statement inside it. If the record contains a statement from someone outside the business, that embedded statement is a separate layer of hearsay and needs its own exception. Rule 805 is explicit: hearsay within hearsay is admissible only if each layer independently satisfies a hearsay exception.5Legal Information Institute. Federal Rules of Evidence Rule 805 – Hearsay Within Hearsay
Consider a hospital intake form. The nurse’s notes about vital signs and observations are part of the hospital’s regular business activity and fit within Rule 803(6). If the form also records the patient’s statement about how the injury happened, that patient statement is a separate hearsay layer. The business records exception covers the nurse’s act of recording it. It does not cover the truth of what the patient said. To use the patient’s statement for its truth, you need an independent exception, such as Rule 803(1) for a present sense impression or Rule 803(2) for an excited utterance.
Before offering a business record, read through it and identify every statement attributable to someone outside the organization’s reporting chain. Each one needs its own hearsay analysis. Skipping that step invites a surgical objection that strips the most important content out of your exhibit.
Trustworthiness Challenges
The opponent’s most powerful tool is the trustworthiness proviso in Rule 803(6)(E). Even when a record checks every foundational box, the judge can exclude it if the source of the information or the circumstances of preparation suggest unreliability. The burden is on the opponent to raise the concern, but they do not necessarily need independent evidence. Pointing out that a record was prepared in anticipation of litigation and happens to favor the party that created it can be enough.1Legal Information Institute. Federal Rules of Evidence Rule 803
The leading case is Palmer v. Hoffman, a 1943 Supreme Court decision. A railroad sought to introduce an accident report prepared by a now-deceased engineer. The Court excluded the report, finding it was created “for use essentially in the court, not in the business.” The report was not part of the systematic conduct of the railroad’s operations the way payrolls, accounts receivable, and bills of lading were. It existed to prepare for litigation, and that motive undermined the reliability presumption that makes the business records exception work.1Legal Information Institute. Federal Rules of Evidence Rule 803
The same principle applies today. Incident reports created after an employee injury, internal memos summarizing a dispute with a vendor, and damage assessments prepared after the company already expects to be sued all face heightened scrutiny. The closer a record sits to the litigation itself rather than the day-to-day operations of the business, the easier it is to challenge.
Other common attacks: showing that the record was created long after the event rather than contemporaneously, that the person recording the information lacked direct knowledge, or that the business had sloppy record-keeping practices that undermine confidence in any particular entry. A witness who cannot explain quality controls or error-correction procedures leaves the door open for all of these.
Electronic Records
Most business records today exist in electronic form, and courts increasingly draw a line between two categories. Computer-stored records are the electronic equivalent of handwritten documents: a person entered the data, and the computer simply holds it. Bookkeeping entries, customer notes, and manually entered transaction logs all fit here. Because a human made the underlying statement, these records are hearsay and must satisfy Rule 803(6) like any paper document.
Computer-generated records are different. These are outputs produced by automated processes with no human input beyond triggering the process. Telephone call logs, ATM transaction timestamps, email header data, and server access logs are common examples. Because no person made the “statement,” many courts have concluded that computer-generated records are not hearsay at all. The focus shifts to authentication under Rule 901, which requires showing that the system producing the record works accurately and was functioning properly at the relevant time.6Legal Information Institute. Federal Rules of Evidence Rule 901 – Authenticating or Identifying Evidence
Many electronic records are hybrids. A spreadsheet might contain both manually entered data (hearsay, needing the 803(6) exception) and auto-calculated fields (computer-generated, needing authentication). A witness who understands both the data-entry procedures and the system’s automated functions is essential.
Metadata and Hash Values
Opposing counsel will often suggest that electronic files were altered after creation. Metadata and hash values are the primary tools for defeating that argument. A hash value is a unique numerical identifier generated by running a mathematical algorithm against a file’s data. The most commonly used algorithms, MD5 and SHA, produce values so distinctive that the probability of two different files producing the same hash is less than one in a billion. If the hash of the file offered in court matches the hash recorded when the file was created or collected, the file has not been changed.
System audit logs serve a similar function. Many record-keeping systems automatically track when a file was created, accessed, or modified, and by which user account. A custodian who can walk through those logs and explain what they show provides strong authentication. Rule 901(b)(9) specifically recognizes that evidence describing a process or system that produces accurate results can authenticate electronic evidence.6Legal Information Institute. Federal Rules of Evidence Rule 901 – Authenticating or Identifying Evidence
Preparing a witness for electronic records means making sure they can explain access controls, backup procedures, and any automated logging features. A witness who can only say “the IT department handles that” will have a rough time on cross-examination.