Implementation note · Reviewed 1 October 2026

C2PA and machine-readable provenance

C2PA is a provenance technology, not the only technique available for Article 50(2). A marker or container string does not prove a valid signed manifest or AI origin. Use a conformant validator to assess signatures, assertions and trust. Missing C2PA does not prove non-compliance; other marking methods and legal scope must be assessed. This scanner records markers without validating cryptographic authenticity.

Use technical observations as supporting evidence. Confirm legal applicability and exceptions independently.

Sources : Article 50 and Commission transparency guidance.