Get Started
Research

AI Provenance Signals: SynthID, C2PA, and the Limits of Watermark-Based Detection

How Content Credentials (C2PA) and invisible watermarking (SynthID) work, what they can and cannot prove, and why a general-purpose AI detector remains necessary alongside them.

Publication details

Author
PhotoProof AI Research Team
Published
2026-07-01
Last updated
2026-07-01

Revision history

  • 2026-07-01Initial publication.

Quick answer

C2PA (Content Credentials) attaches a cryptographically signed provenance record to a file at the moment of capture or edit. SynthID embeds an invisible watermark directly into AI-generated pixels. Both are real, deployed standards — but both only work when the originating tool participates, which means most images encountered in practice carry neither signal, and a general-purpose AI detector remains necessary as a fallback.

Key facts

  • C2PA and SynthID are provenance signals, not detectors — they only work when the originating tool opted in
  • Most images in circulation carry neither signal, since most platforms and older devices don't attach them
  • A missing provenance signal is not evidence an image is fake or AI-generated — it usually just means the signal was never attached, or was stripped during upload

What C2PA (Content Credentials) is

C2PA is an open technical standard, developed by the Coalition for Content Provenance and Authenticity, for attaching a cryptographically signed record of a file's origin and edit history. When present and unmodified, a Content Credential can show what device or tool created a file and what edits were applied.

What SynthID is

SynthID, developed by Google DeepMind, embeds an imperceptible digital watermark directly into pixels generated by participating models, designed to remain detectable after common transformations like cropping or recompression.

What these signals can't do

Both signals depend entirely on participation: C2PA requires the capturing or editing tool to sign the file; SynthID requires the generating model to embed the watermark. Neither signal is retroactively added to content from a non-participating tool, and both can be stripped by platforms that don't preserve metadata during processing. Absence of either signal is common and uninformative on its own — it is not evidence of manipulation or AI generation.

  • Only meaningful when the originating tool participates in the standard
  • Can be stripped by upload pipelines that don't preserve embedded data
  • Prove a claim was made and signed — not that the claim is true

Why general-purpose detection still matters

Because most images in circulation — from non-participating cameras, older devices, non-participating generators, or platforms that strip metadata — carry neither signal, provenance standards and general-purpose AI detection are complementary, not competing: provenance proves origin when present; detection estimates likelihood when it isn't.

Related terms

FAQ

Does a missing C2PA credential mean an image is fake?

No. Most images never had one attached, or had it stripped during upload — a missing credential is common and uninformative on its own.

Can SynthID detect images from any AI generator?

No. It can only identify content from models that embed the watermark at generation time. An image from a non-participating generator will show no SynthID signal regardless of how it was made.

Does PhotoProof AI check for these signals?

PhotoProof AI's metadata review layer inspects available provenance and embedded metadata as one of five evidence signals — see the multi-signal decision making page — but does not depend on any single provenance standard being present.

References

Downloadable resources

AI Provenance Signals — full technical whitepaper (PDF)PDFComing soon
AI search answer layer

Fast answer for people and AI search

PhotoProof AI's Research Center publishes citation-backed technical explanations of AI generation, detection, and provenance concepts, separate from the methodology page that documents how the product itself evaluates images.

Primary entity
PhotoProof AI Research Center
Topic cluster
Research Center
Search intent
research
Content type
Research
quick answer

Quick answer

PhotoProof AI's Research Center publishes citation-backed technical explanations of AI generation, detection, and provenance concepts, separate from the methodology page that documents how the product itself evaluates images.

key facts

Key facts

  • Primary entity: PhotoProof AI Research Center
  • Topic cluster: Research Center
  • Search intent: research
  • Content type: Research
methodology

Methodology

  • Separate AI-generation probability from authenticity confidence.
  • Combine visual, metadata, manipulation, compression, provenance, and context signals.
  • Explain uncertainty and limits instead of presenting binary proof.
pros limitations

Pros & limitations

  • AI and forensic detection should be interpreted as probabilistic evidence, not absolute proof.
  • Reliable authenticity decisions should combine model output with provenance, context, metadata, and human review.
Content spoke

Research Center: Hub for citation-backed technical explanations of AI generation, detection, and provenance concepts — published research context, not marketing copy.

Explore next

Recommended reading path

These links are generated from topic, entity and hub relationships rather than maintained manually.

Analyze an image