Content Authenticity
Prove your content is real, and that it came from you
New: C2PA Free Tier
The authenticity crisis in digital media requires a technical solution
The proliferation of generative AI has made it trivially easy to create convincing synthetic images, audio, and video. Simultaneously, legitimate content is routinely cropped, decontextualized, and re-shared without attribution. News organizations, regulators, platforms, and audiences are demanding technical mechanisms, not just policies, to establish the provenance of digital content.
The C2PA (Coalition for Content Provenance and Authenticity) standard, developed by Adobe, Microsoft, Google, BBC, Reuters, and others, provides that mechanism.
The three components of the content authenticity stack
C2PA Certificates
For signing content with cryptographic provenance assertions under the C2PA standard
CAWG Certificates
For embedding verified organizational or individual identity into C2PA content credentials under the Content Authenticity Working Group standard
Time Stamping Authority (TSA)
RFC 3161-compliant trusted timestamps that keep a C2PA claim signature valid indefinitely, even after the signing certificate expires or is revoked
Which certificate do you need?
Answer two quick questions and we'll recommend the right certificate, or combination, for your use case.
1, What do you primarily need to prove about your content?
2, What best describes your situation?
C2PA Certificate, start here
A C2PA Certificate signs the content manifest, proving your content is authentic, unaltered, and establishing a tamper-evident chain of custody from creation to distribution. It also lets you disclose AI involvement in a standardized, machine-readable format. You don't need verified identity attribution in the credential itself, provenance and tamper detection are what matter.
Highly recommended: add a trusted timestamp from SSL.com’s Time Stamping Authority (TSA) so your C2PA signature stays valid for the long term, even after the signing certificate expires.
CAWG Certificate, and a C2PA Certificate
A CAWG Certificate embeds your verified organizational or personal name directly inside the C2PA manifest, so viewers see who created the content, with identity confirmed by SSL as a trusted CA. CAWG assertions are embedded inside C2PA-signed manifests, so you'll need a C2PA Certificate as the foundational component too.
Highly recommended: add a trusted timestamp from SSL.com’s Time Stamping Authority (TSA) so your C2PA signature stays valid for the long term, even after the signing certificate expires.
Both, C2PA Certificate + CAWG Certificate
For the complete content authenticity stack: a C2PA Certificate signs and protects the manifest (provenance, edit history, AI disclosure), and a CAWG Certificate embeds your verified organizational or personal name inside that signed manifest. Together they answer "Is this credential authentic?" and "Who made this, and can that be verified?"
Highly recommended: add a trusted timestamp from SSL.com’s Time Stamping Authority (TSA) so your C2PA signature stays valid for the long term, even after the signing certificate expires.
Who needs content credentials?
News organizations & wire services
Sign photographs, video, and articles at the point of creation. Downstream publishers and platforms can verify provenance and detect manipulation.
Publishers deploying AI-assisted content
Embed C2PA provenance disclosing AI involvement at creation, meeting EU AI Act and platform disclosure requirements.
Broadcasters & documentary filmmakers
Establish chain-of-custody provenance for footage from capture to broadcast.
Content platforms & social networks
Verify and display content credentials from C2PA-supporting creators and publishers.
Conformant products & startups
Compliance & standards
C2PA (Coalition for Content Provenance and Authenticity)
SSL issues C2PA certificates: the open technical standard for content provenance, supported by Adobe, Google, Microsoft, BBC, Reuters, and others
CAWG (Content Authenticity Working Group)
SSL issues CAWG Certificates: the standard for embedding verified identity into C2PA credentials
EU AI Act
Requires labeling and disclosure of AI-generated content: C2PA credentials provide the technical mechanism
CAI (Content Authenticity Initiative)
Industry coalition promoting content credentials adoption: C2PA is the technical standard it champions
