The industry runs on trust
A gift card rarely goes straight from the brand to the customer. It passes through a processor, and often a distributor, a reseller and a retailer, each running its own systems under its own commercial agreements.
That network works because its participants trust one another. Contracts, long relationships and reputation have carried the industry a long way, and they will continue to.
Trust alone cannot settle every dispute
The difficulty appears when something goes wrong. Codes are redeemed where they were never meant to be sold, or stock is suspected of being stolen. Each party knows its own transactions. None can independently confirm the handovers on either side of it.
Reconstructing what happened means asking each business in turn for its records and reconciling them by hand. That is slow, it depends on everyone cooperating, and the records were never designed to be compared.
Full visibility is not the answer
The obvious remedy is to ask every partner to report who it bought from and who it sold to. Schemes built that way tend to stall, and for good reason.
For a distributor or reseller, its customer relationships are the business. Requiring it to expose them would create a commercial risk larger than the one the scheme set out to reduce.
Accountability shouldn't require exposing the entire distribution chain.
Each handover should be verifiable on its own
We think the better question is narrower. Not who a code passed through, but whether each business can prove the handover it took part in.
A participating business that signs a record when it passes on a code creates evidence that stands on its own: it can be checked as written by that party and unaltered since. Verification then no longer depends only on trusting another party's internal records.
Commercial privacy must be preserved
Accountability does not require everyone to know everyone else. In the model we have designed, each participant sees one hop up and one hop down: the party it bought from and the party it sold to, both of which it already knows.
The brand sees its own handover to its processor and the rest of the chain by hop number and role: how many handovers took place, whether the chain is intact, where an exception sits. It does not receive a map of who sold to whom.
When an investigation genuinely needs a name, a defined break-glass procedure can open one identity, and only with two of three key holders. The opening is itself recorded, so every participant can see that it happened.
Building infrastructure for verifiable distribution
Atomicrails Trace is our implementation of these principles. Participating businesses write a signed receipt for the handover they already handle, daisy-chained to the record before it. Gift card codes, prices, customers and company names stay off the record.
Trace verifies the chain and raises exceptions by code ID and hop, so a brand can act through its processor and its own rules. Advisory checks before a sale are planned next.
The model covers the businesses that choose to take part, and it becomes more useful with each one that does. We think that is where distribution infrastructure is heading: proof that travels with the code, and relationships that stay with the businesses that built them.