C2PA.

Coalition for Content Provenance and Authenticity: an open standard for cryptographically signed metadata that records how digital media was created and edited. It belongs to the AI & ML Security category of cybersecurity.

Coalition for Content Provenance and Authenticity: an open standard for cryptographically signed metadata that records how digital media was created and edited.

C2PA is a technical standard developed by the Coalition for Content Provenance and Authenticity, founded by Adobe, Microsoft, BBC, Intel, and others, and aligned with the Content Authenticity Initiative. It defines tamper-evident "content credentials" attached to images, video, audio, and increasingly to AI-generated assets. Each manifest contains assertions about creator identity, capture device, generative model used, and any edits, signed with X.509 certificates from a trust list of issuing authorities. Verifiers can later detect whether content has been altered or whether claims are inconsistent. C2PA is being adopted by camera manufacturers (Sony, Nikon, Leica), AI generators (Adobe Firefly, OpenAI, Google), and news organisations, and it underpins regulatory frameworks for AI labelling such as the EU AI Act transparency rules.

Defences for C2PA typically combine technical controls and operational practices, as detailed in the full definition above.

Common alternative names include: Content Credentials, C2PA manifest.