Content Credentials at ISO: ISO/CD 22144

The document exists. The ledger fetched it at its publisher and quotes it.

Record ID

CPS-2026-0004

Kind

Standard

Jurisdiction

Global

Last verified

15 September 2026

Added

15 September 2026

• The ISO catalogue entry reads "ISO/CD 22144" with status "Under development" and stage "CD approved for registration as DIS [30.99]".
• The project was approved on 2024-10-28 and sits with ISO/TC 171/SC 2, the subcommittee for document file formats.
• The next lifecycle steps printed on the entry are DIS registered and a twelve week DIS ballot, neither of which has a date on the page.
• Until it is published, a procurement clause or a policy should cite the C2PA specification by version, not an ISO number that does not yet exist.

Embeds a mark or manifest, Displays or verifies, What it requires. Stated means the document you can open below says it; silent means the ledger read the document and it does not.

Embeds a mark or manifestStated

The draft standardises the same manifest architecture the C2PA specification defines.ISO/CD 22144, Authenticity of information, Content credentials, primary source, 15 September 2026.

Displays or verifiesSilent

Nothing displays anything yet. A draft has no implementations to point at.ISO/CD 22144, Authenticity of information, Content credentials, primary source, 15 September 2026.

What it requiresSilent

Nothing. A committee draft imposes no obligation on anybody.ISO/CD 22144, Authenticity of information, Content credentials, primary source, 15 September 2026.

Do not write ISO 22144 into a contract or a tender yet. A buyer who requires conformity with an unpublished standard has written an unenforceable clause, and the number may move before publication. Cite the C2PA technical specification and its version, and set a review for when the ISO entry reaches stage 60.60. A publisher watching this should note who holds it: ISO/TC 171/SC 2, the document formats subcommittee, not an AI committee.

1. ISO/CD 22144, Authenticity of information, Content credentialsPrimary · 15 September 2026

• VerifiedStandardCPS-2026-0001

  The C2PA technical specification, version 2.4

  Global · verified 15 September 2026

  The specification index at spec.c2pa.org redirects to the 2.4 specification, and requests for versions 2.5, 2.6 and 3.0 return HTTP 404.

• VerifiedStandardCPS-2026-0005

  JPEG Trust, ISO/IEC 21617

  Global · verified 15 September 2026

  ISO/IEC 21617-1:2026, Information technology, JPEG Trust, Part 1: Core foundation, status Published, edition 2, publication date 2026-08, stage 60.60.

• Open questionOpen questionCPS-2026-0028

  May the absence of Content Credentials be treated as suspicion?

  Global · verified 15 September 2026

  OpenAI states that if no metadata or watermark is detected "the tool will not make a definitive conclusion about whether the image was generated with OpenAI tools since provenance signals can in some cases be stripped".

• Open questionOpen questionCPS-2026-0027

  Who answers for a manifest that is signed and false?

  Global · verified 15 September 2026

  The C2PA trust model is expressed as validation states: well formed, valid and trusted, each about signatures, certificates and lists rather than about the truth of an assertion.

• Open questionOpen questionCPS-2026-0026

  Does a watermark survive re encoding?

  Global · verified 15 September 2026

  Google states that the image and video watermark is "designed to stand up to modifications like cropping, adding filters, changing frame rates, or lossy compression".

• Open questionOpen questionCPS-2026-0025

  Is a stripped manifest evidence of tampering?

  Global · verified 15 September 2026

  OpenAI states that C2PA metadata "can be stripped, lost through uploads and downloads, or broken by transformations like file format changes, resizing, or screenshots".