Content Provenance
Anathema AI marks generated media. Every image, video and audio file we deliver as a finished generation carries provenance marking, across all models, all plans and all surfaces, including the Studio and the API. No setting turns it off and no plan excludes it.
We publish this commitment because it is what makes the absence of a mark meaningful. A file carrying no Anathema marking is evidence that it did not come from us.
One exception, stated rather than buried. When you generate an image we also keep an unmarked copy, so that editing it again does not stack one mark on top of another and degrade both. It is stored under a random address that is never listed or linked, and it is sent to the editing model when you edit. It is the only unmarked output of ours that exists.
The three layers
Generated media carries up to three independent marks.
- A visible mark in the corner of images and video.
- A signed C2PA manifest, using the Coalition for Content Provenance and Authenticity specification, recording that the file was generated by an AI model and signed by us at a specific time. Signatures incorporate RFC 3161 timestamps from a third-party Time Stamp Authority, preserving validity beyond certificate expiry.
- An invisible watermark carried in the pixels of images and video, and in the waveform of anything with sound. It is built to survive re-encoding, resizing, compression and cropping.
The first two can be stripped by anyone willing to edit the file. The third is the durable one, which is why it exists.
What the mark does not contain
The invisible watermark carries a random number. It does not encode your account, your email or your subscription, it is not derived from any of them, and it cannot be reversed into any of them. Anyone extracting the mark from one of your files learns a random number and nothing more.
That is deliberate. A value derived from your identity would let a third party work out who made a file without ever contacting us. The random number means identifying a generation requires our own records.
We keep a private record linking each mark to the generation that produced it. We do not disclose it on request. We disclose it in response to valid legal process, or where required by law.
Verification
Verification requires no infrastructure on our side. The C2PA manifest is embedded in each asset. Use any C2PA-aware verifier:
A successful verification displays the signing identity (Anathema AI Content Signing), the signature timestamp, and tamper status of the asset.
Active signing certificate
SHA-256 fingerprint of the certificate public key (DER encoding):
03a4e6db29fab2aa0cfed43e3d4a829072964542e203621aeee921b554ac89f3
Content presenting a signature traceable to a different fingerprint was not produced by Anathema AI. Fingerprints for prior certificates remain published below for historical verification.
Certificate rotation history
| Period | Fingerprint |
|---|---|
| 2026-05-16 to present | 03a4e6db29fab2aa0cfed43e3d4a829072964542e203621aeee921b554ac89f3 |
Coverage
Marked:
- Every image, video and audio generation, on every model and every plan
- Chat, the Anathema Studio and the API alike
Not marked:
- User-uploaded assets, whose origin we cannot attest to
- The unmarked editing copy of your own images, reachable only from your own workspace
- Content produced before 2026-05-16, when signing was activated
- Content produced before 2026-08-05 carries the signature and the visible mark but not the invisible watermark, which was added later
Limits
No watermark is unbreakable. A determined party with enough patience can degrade any mark, and a file that has been through enough transformations may lose it. We do not claim otherwise. What the marking gives us is asymmetry: stripping a mark takes deliberate effort, while the mark and our records together make a false claim of Anathema origin straightforward to refute.
Removal requests
If an intimate image or video of you was posted on Anathema without your consent, including one made with AI, use our removal request form. Valid requests are removed within 48 hours.