Ownership and witness seals were impressed on bullae surfaces, which might also be left plain. If tokens needed to be verified after the bulla containing them was sealed, the bulla had to be broken open.
Bullae were marked with ownership and witness seals, which could also be left unadorned. If a token needed to be verified after the bulla containing it was sealed, the bulla had to be opened.