How it works.
The architecture from capture to verifiable record. Open standards throughout.
The capture-to-verification pipeline.
The app proves it is genuine.
Before a photo is certified, the app proves it is the original App Store / Play Store build, using Apple App Attest on iOS and Google Play Integrity on Android. A modified or sideloaded app is refused.
Sealed: invisible watermark.
Our server imprints an invisible watermark into the pixel data. It is imperceptible to viewers and recoverable algorithmically, giving the image a second, harder-to-remove marker alongside its C2PA signature.
Every photo on every plan carries the watermark.
Signed: C2PA manifest.
The watermarked photo is then signed in a C2PA-conformant manifest, with a trusted timestamp.
Recorded: independently witnessed.
Every photo’s fingerprint is independently witnessed and kept in long-term storage. Every photo on every plan is recorded, in regular batches after capture.
Public verification page.
Every certified photo gets a public verification page at cert.photos/v/<id>. No account is required to view it. To check a photo file, use Check a Photo.
Privacy.
Only the photo’s fingerprint is kept long term; the photo and its data can be deleted at any time.
Where we are today.
Want to go deeper?
Technical evaluation, integration scoping, partnership conversations — we’re a small team and we respond. Email us and tell us what you’re working on.