Content Credentials and C2PA

Check the Content Credentials on every image you upload

Freedam reads the C2PA manifest of each uploaded file, checks it against the official trust list and keeps the result with the asset. You can see who signed a file, what was done to it, and whether an AI model made it.

Explore the demo Plans and pricing

The Content Credentials section of an asset page, with the signer, the signing time and each recorded action.

The Content Credentials section of a Freedam asset page: status, signer, signing time, the software that wrote the manifest and the list of recorded actions — The Content Credentials section of an asset page, with the signer, the signing time and each recorded action.

Four statuses

Freedam keeps the difference between valid and trusted

The C2PA specification separates a file that is unchanged since signing from a file signed by a party on the trust list. Freedam shows both, so a self-signed file is not presented as verified.

Verified: The signature and the content hash check out, and the signing certificate chains to the official C2PA trust list.
Signed, unverified signer: The file is unchanged since it was signed, but the certificate is not on the trust list. Cameras using a free default certificate land here.
Invalid: The signature or the content hash failed, usually because the file was edited or re-encoded after signing. The verifier’s notes are shown on the asset.
No credentials: The file carries no manifest. Most files in a library are in this state today, and it says nothing about how the file was made.

AI-generated and camera-captured

Filter the library by where an image came from

Two markers are read from every manifest in the file, including the ingredients of an edited export. AI-generated is set when a tool recorded a trained AI model as the source. Camera-captured requires a verified signature, because a self-signed capture claim proves nothing.

Credential status, AI-generated and camera-captured are fields in the advanced filters. You can leave AI-generated images out of a campaign selection, or keep only verified camera captures for editorial use, and save the filter for the next time.

The same three fields are returned by the REST API for every asset, so other systems can apply the same rule.

The Freedam gallery filter panel with a Content Credentials group: credential status, AI-generated and camera-captured — The Content Credentials group in the gallery filters.

What it can and cannot prove

A credential records what the signing tool declared

Verification tells you that the bytes are unchanged since a given certificate signed a list of statements. It does not analyse the pixels.

A Freedam asset page showing an invalid Content Credential with the verifier note that the content hash does not match — An edited file: the content hash no longer matches the signed manifest.

A file without credentials may come from a camera that does not sign, or from a platform that removed the manifest.
Resizing or converting a file breaks the hash, so previews and resized downloads carry no credentials. The original keeps them and downloads with them.
Freedam does not sign the files it creates yet. That requires a certificate from the C2PA conformance program.

Questions buyers ask

Before you make the change

What are Content Credentials?

Content Credentials are the public name of C2PA manifests: signed records attached to an image, video or audio file that list how it was made and edited. A verifier can check that the file has not changed since it was signed and whether the signer is on the C2PA trust list.

Does Freedam check Content Credentials on every upload?

Yes. Every uploaded original is verified with c2patool against the official C2PA trust list, and the result is stored with the asset. A file that fails verification is still uploaded normally, and administrators can re-run verification across the library later.

Can Freedam tell me which images are AI-generated?

When the generating tool declared it in the credentials, yes. Freedam marks an asset as AI-generated when any manifest in the file records trainedAlgorithmicMedia or compositeWithTrainedAlgorithmicMedia. A file without credentials carries no such record, so the absence of the marker does not prove that no AI was used.

Does Freedam sign the files it creates?

Not yet. Originals keep their credentials and download with them. Previews, resized downloads and conversions are new files and carry none, because the standard binds a manifest to the exact bytes. Signing renditions requires a certificate from the C2PA conformance program.

Continue exploring

If you would like to look at the question from another angle

These pages go a little further into the product, the decision or a related day-to-day situation.

Guide

Upload a signed image and open it

On the Free plan, upload a photo from a signing camera or an image from an AI tool that writes credentials. The Content Credentials section appears on the asset page below the EXIF data.

Explore the demo Plans and pricing

Curious how yours would look? Generate a brand center from your website, free, in about a minute.