Content Credentials & C2PA

Last updated: 2 April 2026

1. Overview

Fotool.ai implements the C2PA (Coalition for Content Provenance and Authenticity) standard to provide verifiable content credentials for all AI-generated images. This ensures transparency, trust, and compliance with the EU AI Act (Article 50) requirements effective August 2026.

Every image generated through our platform carries embedded metadata that proves:

• Who created it — the authenticated user and their organisation
• How it was created — AI generation tool, model, and parameters
• When it was created — tamper-evident timestamp
• Who owns the rights — commercial license holder information
• Verification hash — unique identifier for authenticity checks

2. What is C2PA?

C2PA is an open technical standard developed by Adobe, Microsoft, Intel, BBC, and other industry leaders through the Coalition for Content Provenance and Authenticity. It creates a tamper-evident chain of provenance metadata (called a manifest) embedded directly into media files.

C2PA is part of the broader Content Authenticity Initiative (CAI) ecosystem. Credentials can be verified using any compatible tool, including Content Credentials Verify.

3. What We Embed

Each generated image contains a C2PA manifest with the following assertions:

Field	Description	Example
Creator	Authenticated user (name or user ID)	user_abc123
Organisation	Company name (if B2B account)	Acme Corp
Tool	AI generation software	Fotool.ai v1.x
AI Model	Generation model used	Flux / Stable Diffusion
Action	Type of operation	c2pa.created (AI-generated)
Timestamp	UTC creation time	2026-04-02T14:30:00Z
License	Rights holder and license type	Commercial — Fotool License
Content Hash	SHA-256 hash of the image data	sha256:a1b2c3...
Fotool ID	Unique platform identifier	FT-2026-XXXXXX
Project	Associated project reference	project_xyz789

4. Verification

Anyone can verify the authenticity and origin of a Fotool-generated image:

4.1 Fotool Verify

Use our built-in verification tool at /verify. Upload any image or enter a Fotool ID (FT-XXXX-XXXXXX) to instantly check:

• Whether the image was generated on Fotool.ai
• Who created it and when
• The commercial license status
• Whether the image has been modified since generation

4.2 Third-Party Verification

Because we use the open C2PA standard, images can also be verified using:

• Content Credentials Verify (Adobe)
• Any C2PA-compatible application (Adobe Photoshop, Microsoft Designer, etc.)
• The CAI Open Source SDK

4.3 API Verification

Enterprise customers can verify images programmatically via our API. Contact support@fotool.ai for API documentation.

5. Tamper Detection

C2PA manifests are cryptographically signed. If an image is modified after generation:

• The embedded signature becomes invalid
• Verification tools will flag the image as modified
• The original manifest remains readable, showing the image has been altered

This does not prevent editing — it ensures transparency about what has changed.

6. EU AI Act Compliance

Article 50 of the EU AI Act (effective 2 August 2026) requires providers of AI systems that generate synthetic content to:

1. Mark outputs in a machine-readable format as AI-generated
2. Ensure the marking is detectable by other AI systems
3. Use state-of-the-art technical solutions (C2PA is the recognised standard)

Fotool.ai satisfies all three requirements through C2PA manifest embedding, signed with our platform certificate.

7. Data in Content Credentials

Content Credentials are embedded in the image file itself (JPEG/PNG metadata). They contain:

• No personal data beyond the user ID and optional display name
• No prompt text — we do not expose generation prompts in credentials
• No training data references — only the model name

Users can control their display name in Account Settings. The user ID is a pseudonymous identifier.

8. Signing Authority

Fotool.ai content credentials are signed using a platform certificate issued to FOTOOL LTD. The certificate chain can be independently verified through the C2PA trust list.

Contact

For questions about Content Credentials:

• Email: support@fotool.ai
• Verify: fotool.ai/verify