Content Credentials and C2PA
What are Content Credentials?
When you take a photo, write a document, or create a design, there is no built-in way for that file to say who made it or how. Content Credentials change that. They are a set of metadata — embedded directly in a file — that describe its origin: who created it, what tools were used, and what edits were made along the way.
Think of it like a nutrition label for digital content. A nutrition label tells you what is inside your food. Content Credentials tell you what is inside your file.
What is C2PA?
C2PA stands for the Coalition for Content Provenance and Authenticity. It is the industry standard behind Content Credentials — a shared set of rules that ensures provenance information is recorded in a consistent, verifiable way across different tools and platforms.
C2PA is backed by major technology companies including Adobe, Microsoft, Google, Intel, and many others. When a camera, editing application, or publishing platform supports C2PA, it can attach Content Credentials that any other C2PA-compatible tool can read and verify.
Note
How Sourcemark uses C2PA
When you add a file to Sourcemark, the system checks whether it already contains C2PA Content Credentials. If it does, Sourcemark detects that data and preserves it as part of your record. Your sourcemarked record will note that C2PA information was found, and that provenance chain stays intact.
This detection happens automatically. You do not need to do anything special — just select your file as you normally would.
Do I need C2PA to use Sourcemark?
No. C2PA is entirely optional. Most files today do not contain Content Credentials, and Sourcemark works just as well without them. You can record any file, set your AI training preferences, and build your library regardless of whether C2PA data is present.
If your files do happen to include Content Credentials — for example, because you used a C2PA-compatible camera or editor — Sourcemark will recognise and preserve that information. If they do not, nothing changes about how Sourcemark works for you.
How Sourcemark and C2PA complement each other
C2PA and Sourcemark address different parts of the provenance picture, and they are stronger together.
C2PA answers the question: who made this, and how?It records authorship, tool usage, and edit history directly in the file.
Sourcemark answers a different question: what are the creator's wishes for AI training?When you sourcemark a file, you are placing your AI training preference on the record — whether you allow training, restrict it, or set specific conditions.
When both are present, the result is a more complete provenance chain. A viewer can see not only who created the content and what tools were involved, but also what the creator decided about how their work should be used. Neither system replaces the other. They work side by side, each covering ground the other does not.
What to remember
- Content Credentials are metadata that describe who created a file and how
- C2PA is the industry standard that makes Content Credentials work across platforms
- Sourcemark detects and preserves C2PA data when it is present in your files
- You do not need C2PA to use Sourcemark — it is a bonus, not a requirement
- Together, C2PA and Sourcemark give your work a stronger, more complete provenance record
New to Sourcemark? Learn what Sourcemark is and how it works.