The tenantId on a ChainOfCustody record is set automatically when the document is created and controls which organization can view or edit it. You will never need to set this manually — Piper populates it from your session. It is the primary guard that prevents one tenant's chain-of-custody records from appearing in another tenant's compliance reports.
Technical section
Data model, API, and internals — visible to developers.