About C2PA & This Offer
The Nutrition Label for Digital Content — Now Available for Your TWAIN Workflows
The Coalition for Content Provenance and Authenticity (C2PA) is the open global technical standards body — a project of the Joint Development Foundation under the Linux Foundation — that developed Content Credentials: a tamper-evident system for embedding the provenance, origin, and edit history of digital content directly into the file itself. Think of it as the nutrition label for digital content — visible to anyone, verifiable by any C2PA-conformant tool, and impossible to separate from the content without detection.
For TWAIN Innovation Cloud participants — developers building document capture, scanning, and digital content workflows — C2PA provides the authenticity and provenance layer that answers the question every enterprise customer is now asking: where did this document come from, who touched it, and has it been altered? Whether you're scanning legal records, medical documents, financial instruments, news media, or AI-generated assets, C2PA Content Credentials give every piece of content a verifiable, tamper-evident history.
The TIC trial covers both the Generator Product — which embeds Content Credentials into content at the point of creation or capture — and the Validator Product — which reads, verifies, and reports on the Content Credentials embedded in any C2PA-compliant asset.
Content Credentials
A Nutrition Label for Digital Content — Visible, Verifiable, Tamper-Evident
Content Credentials function like a nutrition label: they reveal the full history of a
piece of digital content — who created it, what tools were used, whether AI was
involved, what edits were made, and when — in a format that is accessible to
anyone, at any time, from any C2PA-conformant tool. The credential is cryptographically
bound to the content and cannot be silently removed or altered without detection.
"Content Credentials give a peek at the content's history available for anyone to access, at any time."
Two Products — One Complete Provenance Pipeline
Generator Product
Generate & Embed Content Credentials
A C2PA Generator Product creates and embeds Content Credentials manifests into digital
content at the moment of creation, capture, or publication. The manifest is cryptographically
signed using a certificate from the C2PA Trust List, binding the credential to both the
content and the signer's identity — making it tamper-evident and verifiable by any
C2PA Validator.
- ›Embeds cryptographically signed provenance manifest into the content file
- ›Records creator identity, creation tool, date/time, and edit history
- ›Flags whether AI was used in content creation or editing
- ›Supports all major file types — JPEG, PNG, PDF, TIFF, video, audio
- ›Certificates from the official C2PA Trust List (C2PA TL)
- ›Conformance verified by the C2PA Conformance program
- ›Listed on the public C2PA Conforming Products List
Validator Product
Verify & Validate Content Credentials
A C2PA Validator Product reads and verifies Content Credentials manifests embedded in
digital content. It checks cryptographic signatures against the C2PA Trust List, verifies
the manifest structure against the C2PA specification, and reports on the full provenance
chain — including creator identity, edit history, tool attribution, and whether the content
has been altered since it was credentialed.
- ›Reads and verifies C2PA Content Credentials manifests from any source
- ›Validates cryptographic signatures against the C2PA Trust List
- ›Checks manifest conformance against C2PA Specification v2.x
- ›Reports full provenance chain — creator, tool, edits, AI involvement
- ›Detects tampering — flags any post-credential content modification
- ›Interoperable with any C2PA-conformant Generator Product
- ›Supports C2PA 1.x (legacy ITL) and C2PA 2.x (official C2PA TL)
How Content Credentials Work
01
Content Created
A document is scanned, image captured, or AI content generated. The Generator Product is invoked at the point of creation.
02
Credentials Embedded
The Generator creates a C2PA manifest recording creator identity, tool, date, and any AI involvement — signed with a C2PA Trust List certificate.
03
Cryptographically Bound
The manifest is cryptographically bound to the content file. Any post-signing alteration to the file breaks the signature — tampering is immediately detectable.
04
Anyone Can Verify
Any C2PA Validator — or contentcredentials.org — reads and verifies the manifest, confirming the content's origin, history, and integrity to any recipient.
Use Cases for TWAIN Innovation Cloud Participants
Document Scanning
Scan-to-Credentialed-Document Workflows
Embed Content Credentials into scanned documents at the point of TWAIN capture — recording the scanner device, operator identity, capture timestamp, and original document type. Every scan becomes a verifiable, tamper-evident digital record.
AI Content
AI-Generated Content Disclosure
For TIC participants using AI OCR, AI data extraction, or AI-enhanced document processing, C2PA Generator Products can record AI involvement directly in the content manifest — meeting emerging regulatory disclosure requirements.
Records Management
Tamper-Evident Legal & Compliance Records
Embed Content Credentials into legal, financial, medical, and government records. Any downstream recipient can instantly verify — through any C2PA Validator — that a document has not been altered since it was scanned and credentialed.
Media Verification
Newsroom & Publishing Authenticity
For TIC participants building media capture or publishing workflows — embed Content Credentials to prove the origin of images and documents captured by TWAIN devices, meeting the requirements of major news platforms and publishers adopting C2PA.
Interoperability
Ecosystem-Wide Verification
C2PA Content Credentials from your Generator Product are verifiable by any C2PA-conformant Validator worldwide — including Adobe, Microsoft, and all Steering Committee members' products — and on contentcredentials.org.
Chain of Custody
Audit-Ready Provenance Chains
As documents move through multi-step workflows — scan, OCR, review, annotation, export — each step can add its own C2PA ingredient to the manifest, creating a complete, cryptographically verified chain of custody for every document.
C2PA Conformance program
Publicly Listed · Trust List Governed · Security Verified
The C2PA Conformance program provides assurance that Generator and Validator products
correctly implement the Content Credentials specification and meet C2PA security requirements.
Conforming products are listed on the public C2PA Conforming Products List — giving users
confidence in implementation quality and guaranteeing interoperability across the Content
Credentials ecosystem.
C2PA Conforming Products List
Public JSON-formatted list of all Generator and Validator products that have passed C2PA conformance testing. Listed products guarantee specification adherence and security requirement compliance.
Official C2PA Trust List (C2PA TL)
Launched mid-2025, replacing the Interim Trust List. Governed by the C2PA Certificate Policy, the C2PA TL supports C2PA 2.x implementations with higher security, stronger governance, and Time Stamping Authority support.
C2PA Conformance Explorer
Browse, search, and filter the live Conforming Products List, C2PA Trust List, and C2PA TSA Trust List — at c2pa-org.github.io/conformance-explorer.
Open Source SDK — Build C2PA Into Your TWAIN Application Today
C2PA publishes open source SDKs maintained by the community on GitHub.
The c2pa-rs (Rust) SDK and c2pa-js (JavaScript) SDK
allow TIC developers to integrate C2PA Generator and Validator functionality directly
into their applications — embedding and reading Content Credentials without waiting
for a commercial product deployment.
github.com/c2pa-org
c2pa-rs (Rust SDK)
c2pa-js (JS SDK)
c2patool (CLI)
Apache 2.0 License
What's Included in the TIC Trial
- ✓ C2PA Generator Product trial access — evaluate the Generator Product's ability to embed Content Credentials into scanned documents, TIFF images, PDFs, JPEGs, and other supported file formats produced by your TWAIN capture workflow.
- ✓ C2PA Validator Product trial access — evaluate the Validator Product's ability to read, verify, and report on Content Credentials manifests — confirming cryptographic signatures, trust list status, and full provenance chain for any C2PA-credentialed asset.
- ✓ C2PA Specification v2.3 access — full access to the current C2PA open technical specification, Certificate Policy, Security Requirements documentation, and conformance testing resources — the complete reference for implementing Content Credentials in your TWAIN application.
- ✓ Open source SDK evaluation — access to the c2pa-rs (Rust) and c2pa-js (JavaScript) SDKs and c2patool CLI for integrating C2PA Generator and Validator functionality directly into your TIC application — with full source code and Apache 2.0 licensing.
- ✓ TWAIN scanning integration consultation — specific guidance on integrating C2PA Content Credentials into TWAIN Direct scan-to-capture workflows — embedding credentials at scan time, recording scanner device identity, and maintaining provenance chains through multi-step document processing pipelines.
- ✓ Conformance program orientation — a walkthrough of the C2PA Conformance program requirements for Generator and Validator products — understanding the Expression of Interest process, Certificate Policy, Security Requirements, and the path to listing on the official C2PA Conforming Products List.
- ✓ Content Credentials verify integration — guidance on integrating with contentcredentials.org and the C2PA Verify API so your end users can independently verify the provenance of documents your application generates — directly in their browser without any additional software.
- ✓ Access to C2PA community resources — Discord community (Content Authenticity Initiative), GitHub discussions, and the C2PA Knowledge Center including news, resources, and FAQs — the same resources used by Adobe, Microsoft, BBC, and all C2PA ecosystem participants.
TIC Participant Trial Request
Start Your C2PA Trial
The C2PA team will contact you within 2 business days with trial access and onboarding resources.
* Required fields