Provenance you can verify. Trust you can share.
Cryptographically signed at the shutter, from any smartphone. Verifiable by anyone. Built on the open C2PA standard.
AI-generated imagery has made “is this real?” the question of the decade. Certified.Photos gives every photo a cryptographic answer — at the moment of capture, on any modern smartphone.
The app installs and runs only on non-jailbroken (iOS) and non-rooted (Android) devices. If the OS sandbox is compromised, the app refuses to launch in a signing role.
Every layer above this stands on the OS enforcing its own protections.
At runtime, the app re-checks itself against the original App Store / Play Store build. A modified, sideloaded, or tampered app refuses to sign.
A trusted signing environment is what makes everything downstream trustworthy.
Every photo is signed at the shutter, bound to the exact frame the sensor saw. Pass or fail: a clear answer, every time.
The signature exists only for what the sensor actually captured.
The signature is packaged in a C2PA-conformant manifest — the open provenance format backed by Adobe, the BBC, Microsoft, and the major camera makers.
One standard C2PA reader works for every certified photo.
Pro adds an invisible watermark imprinted at capture: a second, harder-to-remove marker that travels in the pixels alongside the C2PA signature.
Imperceptible to viewers, embedded directly in the pixel data.
With Enterprise, every photo’s hash is co-signed by an independent witness network, producing a tamper-evident record of when this image first existed. Copies are necessarily after the original. Forged dates fail verification.
Distributed across independent witnesses — designed to outlive any single operator, including us.
The capture-to-verification path explained, layer by layer. OS integrity, app integrity, capture-time signing, device attestation, invisible watermark, witness anchoring. For evaluators, IT, and partners.
Read the overview → FOR NEWSROOMSEnd-to-end newsroom workflow. Contributor onboarding, source protection, and a public certificate page on every published photo.
See the newsroom flow →The free tier covers the foundation: OS integrity, app integrity self-check, capture-time fingerprinting, and C2PA signing. Every photo you take through the app is cryptographically signed at the shutter and gets its own public verification page at cert.photos/v/<id>. Free for every photo you take.
An imperceptible mark imprinted in the pixels at capture: a second, harder-to-remove marker alongside the C2PA signature.
Email us for more info →The cryptographic record of capture lives forever. The personally identifying data — photographer ID, GPS coordinates, EXIF — lives in deletable storage. Right-to-erasure works. Source protection in war zones works. The proof of authenticity stands on its own, independent of the deletable data.
Email us for more info →