DEA controlled-substance log for small veterinary practices
Your small-animal clinic just refilled ketamine. Your emergency vet dispensed methadone before a fracture repair. Your equine practice picked up two vials of buprenorphine from the pharmacy. Each of these moments starts a 21 CFR 1304 record obligation with the DEA. Miss the record, misplace it, or write it in a way that is not "readily retrievable" during an inspection, and your DEA registration is on the line.
Controlled-substance record-keeping is one of the areas where small veterinary practices most often trip. Not because the rules are secret — 21 CFR Part 1304 is public and clear — but because the records live in three places (paper log book, practice-management software, a shelf tag), and reconciling them the day the DEA Diversion Investigator arrives is a scramble.
This article is for veterinarians, practice managers and lead RVT/CVTs of small US veterinary practices. We show what 21 CFR 1304 actually requires, the record types you must maintain, the top DEA-inspection findings we see at small practices, and a log format that survives audit without a fire drill.
Who this applies to
Any veterinary practice with a DEA registration under Form 224 (Practitioner) or Form 224A (Mid-level practitioner, some states) that receives, stores, dispenses or destroys any Schedule II–V controlled substance. That includes clinics that only carry Schedule IV drugs like tramadol or Schedule III drugs like buprenorphine.
Registration category matters: a practitioner registration is not the same as a distributor registration, and the record-keeping requirements differ. This article covers practitioners. If you also dispense to another registrant (rare in vet), you have additional Form 222 obligations under 21 CFR 1305.
What 21 CFR 1304 actually requires
§1304.03 — Persons required to keep records
> "Each registrant shall maintain the records and inventories and shall file the reports required by this part."
Every practitioner registrant must keep records. There is no small-practice exemption. If your registration is active, the records are required.
§1304.04 — Maintenance of records and inventories
> "Every inventory and other records required to be kept under this part shall be kept by the registrant and be available, for at least 2 years from the date of such inventory or records, for inspection and copying by authorized employees of the Administration."
Two-year minimum federally. Many states require 3 or 5 years — California requires 3, New York requires 5. Check your state veterinary board and pharmacy board rules.
Records must be kept at the registered location and be "readily retrievable". That does not mean "in a filing cabinet" — it means an inspector who asks for the record can be handed it within a reasonable time, which in practice means minutes, not "let me call our IT vendor".
§1304.11 — Inventory requirements
> "Each inventory shall contain a complete and accurate record of all controlled substances on hand on the date the inventory is taken."
Required inventories:
The biennial inventory is the one small practices miss most. If your initial inventory was taken on 2024-03-15, the next is 2026-03-15 (± 6 months). Missing it is a per-day violation.
§1304.21 — General requirements for continuing records
> "Every registrant required to keep records pursuant to §1304.03 shall maintain, on a current basis, a complete and accurate record of each substance ... received, sold, delivered, exported, or otherwise disposed of by him/her."
"Current basis" means the record is created at the time of the transaction, not reconstructed weeks later. A practice-management software entry that dispenses ketamine but does not log the exact quantity remaining after dispensing is not a compliant continuing record.
§1304.22 — Continuing records for specific registrants
For practitioners (paragraph (c)), the continuing records must include:
Record types your practice must maintain
Across the sections above, a practitioner practice needs:
1. Initial + biennial inventory records
For each Schedule II drug: exact count. For Schedule III–V: exact count for the finished form (bottle, vial). Documented with taker's name, date, time, and a signed hand-written or electronic attestation.
2. Receipt records — Schedule II
DEA Form 222 (paper) or CSOS (electronic) for every Schedule II receipt. The distributor keeps a copy, you keep a copy — and yours must be filed separately from Schedule III–V records (§1304.04(g)).
3. Receipt records — Schedule III–V
Invoices from the supplier, kept for 2 years. Best practice is to date-stamp on receipt and initial verification of quantity received against quantity ordered.
4. Dispensing records
Every dispensing event: date, patient (animal + owner), quantity dispensed, quantity remaining, prescribing veterinarian. Schedule II records must be filed separately.
5. Disposal records
Expired or contaminated Schedule II substances go to a reverse distributor under §1307.11 with DEA Form 41 documentation. Schedule III–V may be destroyed by the practice under the state pharmacy board's witnessed-destruction protocol, but the destruction record still lives in your files.
6. Loss/theft records
DEA Form 106 within 1 business day of discovering the loss. A copy stays in your records. Every loss — even one broken vial — is a Form 106.
Minimum fields per record type
Across the record types, the fields DEA Diversion Investigators consistently ask for:
**Substance identification** — drug name, schedule, strength, dosage form (bottle 100mg/mL 10mL vial vs 5mL vial), manufacturer, NDC.
**Quantity received / dispensed / on-hand** — exact counts for Schedule II; commercial-container counts for Schedule III–V.
**Transaction date and time** — date of receipt, date of dispensing, date of destruction.
**Source or destination** — supplier name and DEA number for receipts; patient name / owner / prescribing vet for dispensing.
**Storage location** — the specific locked cabinet or safe. "Controlled drug cabinet in treatment room" beats "clinic".
**Storage access log** — who has keys or combinations, when combinations were last changed, staff changes since last update.
**Reference document** — DEA Form 222 number for Schedule II receipts, Form 106 for losses, Form 41 for reverse-distributor disposals.
Top DEA-inspection findings at small vet practices
DEA Diversion Investigators publish general themes; these repeat at small practices:
Finding 1: Missing biennial inventory
"When was your last biennial inventory?" "…umm, we did one when we opened." That was 2019. It is now 2026. Every two years since 2019 = three missed inventories = per-day violations across multiple substances.
Set a calendar reminder. Take the inventory. Document. Repeat every two years — same window, ± 6 months.
Finding 2: Schedule II records not separated
§1304.04(g) is explicit: Schedule II records must be filed separately from Schedule III–V records. Small practices commonly keep one log book with all controlled substances in date order. That is a citable finding on any first inspection.
Separate binders. Separate digital folders. Every Schedule II transaction lives with other Schedule II transactions, apart from Schedule III–V.
Finding 3: Reconciliation gap between paper log and practice-management software
The practice-management software says 12 ketamine vials dispensed this month. The paper log says 11. The physical count shows 9. Nobody knows which is right. "We had a busy month."
A reconciliation cadence — weekly at minimum, daily for high-turnover Schedule II — with initials and date on the reconciled record. Any variance triggers an investigation before the next inspection finds it.
Finding 4: Loss discovered but no Form 106
A vial breaks in the treatment room. The staff sweeps it up. Nobody files a Form 106 because "it was just an accident". Six months later, the biennial inventory does not reconcile, and the missing quantity has no documented explanation. That is a §1301.76 violation (failure to report loss).
Every loss — theft, breakage, spillage, loss during dispensing — gets a Form 106 within 1 business day. Even the accidents.
Finding 5: "Readily retrievable" fails the stopwatch test
Investigator: "Show me the receipt record for ketamine batch 7742XR3." Practice manager: "Let me call our IT vendor to pull it up." That is not "readily retrievable" under §1304.04.
The records inspection team should be able to hand over any specific record within minutes. If your records live in three systems and take reconciliation to answer one question, you fail this test even if every record technically exists.
Sample continuing record entry
A ketamine dispensing at a small-animal clinic:
- Patient: Bailey (Golden Retriever), owner Jane Kowalski
- Prescribing veterinarian: Dr. M. Patel (DEA #BP0942331)
- Dispensed: 2.0 mL for anaesthesia induction
- Remaining in vial: 6.5 mL (pre-transaction 8.5 mL, matches previous entry)
- Recorded by: RVT J. Nguyen (initials JN)
That single entry answers every question in §1304.22 for this transaction and rolls into the biennial inventory count without reconciliation.
Paper log vs digital record
Most small practices still keep a paper controlled-drug log book alongside their practice-management software. That is legal (§1304.04 allows either format), but it doubles the record-keeping work and creates the reconciliation gap that Finding 3 is about.
A digital continuing record must meet §1311 electronic-record requirements to fully replace the paper log — closed-loop audit trail, tamper-evident storage, user-authenticated access. If your practice-management software claims to "replace the paper log," ask them for the §1311 compliance documentation. Some can produce it; some cannot.
Where Asseto fits: **not** as a §1311-compliant electronic continuing record for dispensing. Dispensing lives in your practice-management software (or on paper). Asseto handles the *inventory metadata* around the drugs — where each vial is stored, who has access to the cabinet, when receipts arrived, what the reconciled counts are, when the biennial inventory falls due. It is the piece the practice-management software often does not track.
How [Asseto](/for/veterinary-clinics) helps with §1304 record-keeping
Asseto is an asset register, not a dispensing system. For 21 CFR 1304, it covers the parts DEA Diversion Investigators ask about that are not dispensing events:
What Asseto does not do — deliberately: real-time dispensing events tied to individual patients, § 1311 electronic-continuing-record functionality, e-prescribing. Those belong in your practice-management software.
When the DEA Diversion Investigator asks "where is your ketamine, when did you receive it, when was your last biennial inventory" — Asseto answers that in the register export. When they ask "who dispensed the 2mL to Bailey on November 5th" — that answer comes from your PMS.
Build the register before DEA Diversion visits
The worst time to build a controlled-drug inventory register is during a Diversion Investigator visit. Records fragmented across three systems. Reconciliation gaps nobody can explain. A missed biennial inventory. A Form 106 that never got filed for the vial that broke in April.
Start today. Walk to the C-cabinet with a clipboard. Every vial, every bottle — write it down. Match against the receipt invoice. Match against the paper log. Note the discrepancies now, on your terms. File the Form 106s for any losses you find. Book the biennial inventory if you missed the last one.
In one afternoon a small-animal clinic has a reconciled register. In a week an equine or emergency practice has one. In a month you have the register a Diversion Investigator inspects in the first hour and moves on.
[Try Asseto free](/signup) and stand up a §1304-supporting controlled-drug register in an afternoon. CSV import from your existing paper log or PMS export. Storage-location tracking, movement history, reconciliation counts — all there. You keep the register. DEA record-keeping stays defensible. And the next inspection stops being the thing you dread.
Related articles
HIPAA-compliant device inventory for small medical practices
Small US practices must track every device that touches ePHI — HIPAA §164.310(d)(2)(iii). Required fields, top OCR audit findings, and a register format that survives a breach investigation.
CLIA equipment register for small US clinical laboratories
US clinical labs under CLIA (42 CFR 493) must document every instrument, reagent lot and calibration. Required fields, top CMS/COLA/CAP inspection findings, and a register format that passes survey.
HIPAA vs GDPR device inventory: two laws, one register
Most compliance guides pick a side. This one maps HIPAA §164.310(d)(2)(iii) directly to GDPR Article 30 and 32, then shows how a single device register satisfies both — for practices that see US and EU patients.
Ready to streamline your inventory?
Start free today and see the difference organized inventory makes.