Work through the decision
Choose a stable destination and keep the physical asset ID readable beside any QR code. The destination may show public care information or require authorised workspace access; the code itself grants no extra permission. Test the actual printed size and placement. Avoid private addresses, credentials and temporary signed file links in the encoded payload.
A fictional worked example
A fictional warehouse label points to an asset passport, while a printed ID lets a custodian find the record if scanning fails. A private inspection image is still protected by its record grant rather than being made public through the label.
Evidence and authority limit
A QR link is navigation, not verified identity, custody confirmation or permission to read private records.
Put it into practice
Draft one public-care label and one authorised-workspace label, each with a readable fallback.
Keep this record: Label payloads, access scope, print-test notes and replacement responsibility.
- The destination is stable and authorised.
- The asset ID remains readable.
- No private token or sensitive location is encoded.
