Free C2PA Checker Exposes AI Content Provenance

Your client asks a question you cannot answer with a straight face: “Was any of this AI-generated?” Until now, the honest answer was a shrug. A new free C2PA content credentials checker from Santa Cruz Software changes that — it reads the hidden provenance data baked into images, video, documents, and audio, and tells you exactly what tools touched the file.

Best part: it runs entirely in your browser. Nothing is uploaded, nothing is stored. For freelancers and creators selling trust, that is a superpower.

What the free tool actually does

Santa Cruz Software released the Provenance Detection Tool through its Santa Cruz Software Labs, free to use. It reads the C2PA manifest (Content Credentials) inside a digital file and presents its provenance readably: Content Credentials, technical details, and recorded action history — including which software modified the asset and whether tools like Adobe Firefly, ChatGPT, or Google Gemini were involved.

$0
free to use, browser-based, via Santa Cruz Software Labs
250 MB
max file size — images, documents, video, audio, standalone .c2pa
0
bytes uploaded — files are processed locally, never stored
JSON
downloadable compliance report for brand, legal & client archives

All figures from Santa Cruz Software’s official announcement.

The tool page is honest about scope: a structural read-out of the embedded provenance data, decoded entirely on-device:

Capability SCS Provenance Detection Notes
Locate C2PA manifest Yes Scans JPEG, PNG, TIFF, SVG, video, audio & standalone .c2pa files
Readable action history Yes Which software touched the asset, what changed, AI involvement flags
JSON compliance report Yes Downloadable record for brand, legal & client archives
Cryptographic signature + trust-list validation No — links out The tool page directs that step to contentcredentials.org/verify
How the provenance check works: locate manifest, walk JUMBF box tree, decode CBOR JSON XMP, flag what needs the official tool
The four-step check, per Santa Cruz Software’s official tool page — all decoded on-device.

Why freelancers and creators should care

  • Regulation is coming. Santa Cruz Software ties the launch to Article 50 of the EU AI Act, with transparency requirements for certain AI-generated or manipulated content. Machine-readable disclosure is becoming legally relevant.
  • Platforms demand labels. Meta, Google, TikTok and others increasingly require AI-disclosure labels — check the manifest’s source type before an asset goes to media buying.
  • Clients pay for certainty. “Generative AI is quickly becoming a normal part of creative production,” says CEO Mark Hilton. A freelancer who can prove a deliverable’s history beats one who can only promise it.

“An image that looks like a photograph makes an implicit claim about the world,” adds Paul Melcher of Santa Cruz Software — and provenance data lets the audience check that claim. Verifiable trust is now a deliverable.

What the free checker inspects: AI involvement flags, full action history, files up to 250 MB, JSON compliance report
What the free tool inspects — per the official announcement and tool page.

Your provenance-proof workflow

From creation to client-proof in 5 steps

1
Export with credentials
Export from Photoshop, Lightroom or Firefly with “Content Credentials” enabled, so edits append to the manifest.
2
Run the checker
Drop the file into the browser tool — it decodes the manifest locally, nothing leaves your device.
3
Review AI flags
Check the action history and digitalSourceType: confirm every AI-assisted step is disclosed accurately.
4
Download the JSON report
Save the compliance report — the tool page calls it the fastest way to answer “was this AI-generated?” months later.
5
Attach to the deliverable
Ship the report with the asset. Your client gets proof, not promises.

Heed the tool page’s warning: re-check after every re-save — flattening, converting, or exporting for web can silently drop C2PA data.

Why provenance matters now: EU AI Act Article 50, platform disclosure labels, provable client trust
Why provenance matters now — regulation, platforms, and client trust are converging.

How to profit: sell provenance-verified deliverables

  1. Offer a “verified authentic” tier. Every deliverable ships with its JSON provenance report. Charge a premium for it.
  2. Audit client libraries. Run a client’s assets through the checker and report: which carry credentials, which lost them in export, which show undisclosed AI steps.
  3. Become the EU AI Act helper. Article 50’s transparency rules mean someone must do the disclosure work. Be the freelancer who keeps client content compliant.
  4. Guard the export pipeline. Set up export presets with Content Credentials enabled so manifests survive — a one-time setup plus per-project verification.
  5. Never upload client work to check it. On-device processing is the selling point for confidential material — unreleased campaigns, legal exhibits, pre-launch assets.

FAQ

What are C2PA Content Credentials?

Content Credentials are C2PA provenance data embedded in a file — a record of how content was created or modified, including which software was used and whether generative AI was involved.

Is the tool really free?

Yes — the Provenance Detection Tool is free to use through Santa Cruz Software Labs.

Does it upload my files anywhere?

No. Files are processed locally in your browser — not transmitted to Santa Cruz Software or any third party, and nothing is stored.

What if a file has no manifest?

Then there are no credentials to read — itself a finding. But some pipelines silently drop C2PA data on re-save, so a missing manifest proves nothing.

Does it prove a file is AI-generated?

It shows the recorded history — what the creating tools declared. It can’t detect unrecorded AI use, and an absent manifest proves nothing. Strong evidence, not a lie detector.

What’s the EU AI Act Article 50 angle?

Article 50 includes transparency requirements for certain AI-generated or manipulated content — machine-readable disclosure is becoming a compliance matter.

Sources

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top