The C2PA conformance programme, the trust list and the conforming products list

The document exists. The ledger fetched it at its publisher and quotes it.

Record ID

CPS-2026-0003

Kind

Standard

Jurisdiction

Global

Last verified

15 September 2026

Added

15 September 2026

• The programme holds generator products, validator products and certification authorities to the specification, the Certificate Policy and the Security Requirements.
• The interim trust list was frozen on 1 January 2026: no new entries, no updates, though content signed during a certificate's validity stays valid against the legacy model.
• The conforming products list is a single JSON file in the C2PA organisation's own public repository, which means a checker can audit a claim rather than trust a press release.
• Every entry in the list read on 2026-09-15 carried status conformant, and each names the spec version it was assessed against, which for the whole list is 2.2.

Embeds a mark or manifest, Displays or verifies, What it requires. Stated means the document you can open below says it; silent means the ledger read the document and it does not.

Embeds a mark or manifestSilent

The programme does not embed anything. It assesses the products that do.C2PA Conformance, primary source, 15 September 2026.

Displays or verifiesStated

The conformance explorer and the published lists are how the public sees who is on the trust list.C2PA Conformance, primary source, 15 September 2026.

What it requiresStated

Conformance is voluntary, but the trust list is what decides whether a validator shows a signer as known.C2PA Conformance, primary source, 15 September 2026.

1. 209 products

   conforming products listed

   C2PA conforming products list, primary source, as of 15 September 2026.

2. 185 products

   generator products

   C2PA conforming products list, primary source, as of 15 September 2026.

3. 24 products

   validator products

   C2PA conforming products list, primary source, as of 15 September 2026.

This is the list to check before you accept anybody's claim of conformance. A vendor saying it supports Content Credentials is saying something about its code; a vendor on the conforming products list has been assessed. For a newsroom, the practical rule is that a valid signature from a certificate outside the trust list tells you the bytes were not altered since signing and nothing at all about who signed them.

1. C2PA ConformancePrimary · 15 September 2026
2. C2PA conforming products listPrimary · 15 September 2026

• VerifiedStandardCPS-2026-0001

  The C2PA technical specification, version 2.4

  Global · verified 15 September 2026

  The specification index at spec.c2pa.org redirects to the 2.4 specification, and requests for versions 2.5, 2.6 and 3.0 return HTTP 404.

• VerifiedPlatform or model providerCPS-2026-0009

  OpenAI: Content Credentials, SynthID and a verification tool

  United States · verified 15 September 2026

  OpenAI states it began adding Content Credentials to DALL-E 3 images in 2024 and later to ImageGen and Sora, and joined the C2PA steering committee.

• VerifiedPlatform or model providerCPS-2026-0010

  Google: SynthID watermarking, the SynthID Detector, and C2PA in Pixel and Photos

  United States · verified 15 September 2026

  Google states that "SynthID embeds digital watermarks directly into AI-generated images, audio, text or video" and that the watermarks are imperceptible to humans.

• AbsentPlatform or model providerCPS-2026-0017

  Anthropic: no published provenance mark

  United States · verified 15 September 2026

  Anthropic's transparency page was fetched in full and contains no occurrence of C2PA, Content Credentials, provenance or watermark.

• Open questionOpen questionCPS-2026-0028

  May the absence of Content Credentials be treated as suspicion?

  Global · verified 15 September 2026

  OpenAI states that if no metadata or watermark is detected "the tool will not make a definitive conclusion about whether the image was generated with OpenAI tools since provenance signals can in some cases be stripped".

• Open questionOpen questionCPS-2026-0027

  Who answers for a manifest that is signed and false?

  Global · verified 15 September 2026

  The C2PA trust model is expressed as validation states: well formed, valid and trusted, each about signatures, certificates and lists rather than about the truth of an assertion.