C2PA in DAM: Real or Fake? | brix Solutions AG - brix

Echt oder Fake Was der C2 PA Standard für Ihr DAM bedeutet

A picture is worth a thousand words – but it doesn’t tell you where it comes from. Today, generative AI creates product photos, portraits, and scenes in a matter of seconds that are virtually indistinguishable from real photographs. Yet it is precisely this distinction that has become a mandatory task for marketing, communications, and compliance teams: customers, regulatory authorities, and your own brand management all demand transparency regarding which content is authentic and which is not. The open standard C2PA provides the technical foundation for this – and the DAM is where it comes into play.

In this article, we’ll show you what’s behind C2PA, why the topic is gaining traction in the DAM world right now, what it specifically means for your content processes, and how to get started.

What is C2PA?

C2PA (Coalition for Content Provenance and Authenticity) is an open technical standard that attaches cryptographically signed provenance information to digital media.

These «content credentials» function like a delivery note that is permanently linked to the product: They document which camera, software, or AI generator was used to create an asset and how it was subsequently edited.

Anyone who modifies the content without re-signing it breaks the seal – and that’s exactly what can be detected automatically. We explain how the manifest works in detail, what C2PA enables in DAM systems, and how the standard differs from AI watermarks in the Knowledge Hub article «The C2PA Standard Explained.»

Why this topic is now relevant for DAM systems, too

C2PA isn’t new – Leica launched the first camera with integrated Content Credentials back in 2023. What’s new is that several developments are converging simultaneously, bringing the standard out of its niche.

Wide range of devices: In addition to professional cameras from Leica, Nikon, and other manufacturers, smartphones like the Google Pixel now natively sign up to ten images.
AI generators self-label: Tools like Adobe Firefly, ChatGPT, and Google Gemini tag generated images with C2PA manifests that identify them as AI-generated.
DAM providers are following suit: More and more DAM vendors are retrofitting C2PA support directly into their platforms. Industry analyses—such as those by Frost & Sullivan—cite provenance and structured metadata as prerequisites for «AI-enabled» content.

Regulation sets the pace: As of August 2, 2026, the transparency requirements under Article 50 of the EU AI Act apply. Anyone who publishes images, videos, or audio content that appears deceptively real – whether AI-generated or AI-modified – must disclose this, for example, with a clearly visible label such as «AI-generated» directly on the image or video. The labeling itself is also regulated: It must be clearly recognizable and appear no later than the first time the content is viewed. The EU provides a standardized symbol for this purpose, though equivalent labels are also permitted. The requirement for AI providers to mark their products in a machine-readable format has been postponed to December 2, 2026, for systems already on the market.

For Swiss companies that distribute content within the EU, this is not a theoretical debate. The question is no longer whether proofs of origin play a role in day-to-day content management, but rather where they are verified, stored, and analyzed.

What does this mean for your company?

The DAM is the central hub through which images, videos, and documents flow into the company and out again into campaigns, websites, and print products. This makes it the logical checkpoint for authenticity. Specifically, this results in five areas of action.

1. Verify provenance upon upload – not just upon publication

The later a questionable file is discovered, the more expensive it is to correct. If an image is already in the campaign, in the catalog, and on the website, the search for all instances of its use begins. If, on the other hand, the origin is verified upon entry into the DAM and stored in the metadata, the information is available to every user from the start – filterable and searchable just like any other attribute.

2. Treat AI-generated content as a separate asset class

AI-generated images aren’t problematic per se. The problem arises when no one knows which ones are AI-generated. If a C2PA manifest identifies an asset as AI-generated, this can be made visible in the DAM and linked to specific rules (e.g., an additional approval step or a labeling requirement for publication).

In our article «The DAM Librarian Isn’t Dead. They're Taking the Reins.», we show how governance tasks in the DAM are shifting in the age of AI.

3. Demonstrably fulfilling transparency obligations

Anyone who wants to comply with labeling requirements must first know which content is affected. A DAM that systematically captures C2PA information provides exactly this basis for decision-making – while simultaneously documenting that a review has been conducted. This does not replace a legal assessment on a case-by-case basis, but it makes the process significantly easier.

4. Securing your brand and supply chain

Agencies, photographers, partners, and distributors continuously supply material. With Content Credentials, you can verify whether an asset actually originates from an authorized source and has remained unchanged since it was signed. This protects against material that has been surreptitiously inserted or manipulated – and provides you with an objective criterion for collaborating with content suppliers.

5. Industries with a greater need for trust

This issue is particularly relevant in contexts where images serve as evidence or convey information: in media and publishing, in the pharmaceutical and medical technology industries, in insurance, and in public administration. A manipulated product image is annoying – but a manipulated image in a technical document or insurance claim can have serious consequences.

Those who integrate C2PA into their DAM create transparency regarding their content inventory, reduce liability and reputational risks, and gain a robust foundation for handling AI-generated content.

What are the limitations of C2PA?

As compelling as the approach is, C2PA is not a lie detector. Anyone who wants to use the standard effectively should be aware of three limitations:

Missing credentials do not mean «fake»: A large portion of the images available today do not (yet) carry content credentials. An asset without a seal is not suspicious; it is simply unverified.
Metadata can be lost: Screenshots, some export functions, and many social media platforms remove embedded metadata. This makes it all the more important to verify the origin while the original is still in the DAM.
Origin does not equal truth: A valid manifest documents who created an asset and how it was edited – not whether the content depicted is factually correct.

Content Credentials therefore realize their value not as a standalone measure, but in conjunction with clear rules: Which sources must provide signed content? How do you handle assets without verification? Who approves AI-generated content?

What’s the best way to get started?

Getting started doesn’t have to be a major project. A step-by-step approach has proven effective:

Assess your DAM’s capabilities: Check whether and to what extent your DAM system can already extract C2PA information and store it as metadata.
Make your inventory visible: First, check how many of your assets already carry content credentials – and which of these are identified as AI-generated.
Define a policy: Specify for which asset types and sources proof of origin is required and how AI-generated content should be handled.
Involve suppliers: Request signed deliveries from agencies and photographers where the tools they use already support this.
Supplement approval processes: Link the verification status to your existing workflows, for example as a criterion in the asset approval process.

This way, authenticity verification grows organically with your processes – rather than being perceived as an additional hurdle.

Conclusion

Content authenticity is the new prerequisite for trustworthy brand communication. C2PA provides an open, widely supported standard, and the DAM is the ideal place to implement it effectively: where assets are received, managed, and redistributed. Companies that systematically track the provenance of their content today are better equipped to handle transparency requirements, AI-generated content, and more demanding customers than those who only start looking for solutions when a crisis strikes.

Do you want to ensure that only authentic content makes it into your campaigns?

We’ll show you what your system is already capable of today.

Real or Fake? Authenticity for Digital Content – What the C2PA Standard Means for Your DAM