Looking to implement C2PA? Trufo provides tooling to take care of everything from certificates and timestamping to watermarking and fingerprinting. Learn More

A Timeline of Provenance Adoption

and where you might fit in

v2025.10.16

Over the past three years, content provenance has grown from a collection of ideas to a working global ecosystem. With the recent launch of C2PA provenance in smartphones (e.g. Pixel 10) coupled with the steady march of generative AI tools (e.g. Sora 2), the adoption of provenance is reaching an inflection point: provenance used to be experimental, but now it is essential. Taking a step back, here is a broad overview of provenance adoption.

Organizations

C2PA: The Coalition for Content Provenance and Authenticity (C2PA) standard was formed in early 2021 as a cross-industry joint effort spearheaded by Adobe, and work soon began on designing a standard for cryptographic metadata. Version 1.0 was released in 2022. In 2024, many key tech companies joined, including Google, TikTok, Meta, OpenAI, Amazon, and more. C2PA also has become a major topic within many industry groups, with some of the larger ones being the IPTC (C2PA for news media) and JPEG Trust (built on C2PA). In October 2025, C2PA formally announced its conformance program, rooting its trust model in a proper PKI.

CAI: The Content Authenticity Initiative (CAI) is community movement led by Adobe focused on the adoption of C2PA. It was founded in 2019, and grew from 200 members in 2022 to 1000 members in 2023 to 4000 members in 2024.

AMAS: The AI and Multimedia Standards Collaboration (AMAS) is a global standards collaboration formed in partnership with the UN International Telecommunication Union (ITU) under the World Standards Cooperation as part of the larger AI for Good initiative. A policy paper has been recently published.

AISIC: The AI Safety Institute Consortium (AISIC) is a NIST-led consortium that brings together public and private sectors to develop science-based guidelines and standards for AI measurement and safety. One of the working groups (WG2) focuses on synthetic media.

IPTC: The International Press Telecommunications Council (IPTC) is the leading standards body for news media. Much of the focus recently has been on the implementation of C2PA within the industry.

Trufo: Trufo was founded in late 2023, with a focus on cryptographic watermarks. As a core member of the C2PA and a founding member of the AISIC, Trufo has championed the importance of provenance that is both secure and durable. Trufo is the leading provider of enterprise content provenance, and the only provider that is able to provide all the essential components in one solution: from C2PA certificate issuance (as a recognized Root CA) to digital watermarking APIs (best in the industry); from open-source tooling to hosted cloud services.

Regulations

Government legislation on provenance has advanced significantly across major jurisdictions:

In the United States:

10/30/2023: Biden signs Executive Order 14110, which established the AISIC and encourages watermarks.

11/20/2024: NIST publishes AI 100-4, providing a technical overview of synthetic media with a focus on provenance.

4/10/2025: The COPIED Act is reintroduced, mandating NIST standards and protecting provenance labels.

In the European Union:

4/21/2021: The AI Act is proposed, mandating provenance labels for synthetic media.

3/13/2024: The AI Act is adopted.

8/1/2026: The AI Act rules on provenance go into effect.

In China:

8/15/2023: Interim requirements for synthetic content go into effect.

9/1/2025: Labeling requirements for synthetic content go into effect.

Adoption in Industry

Hardware

In late 2023, the first cameras with C2PA support were rolled out: Canon EOS-R1, Leica M11-P, Nikon Z9, and Sony Alpha 1/a9-III. Photos taken with these private models were demoed by news organizations, including AP and Reuters.

In July 2025, Sony released a camcorder with C2PA support for video: Sony PXW-Z300. An end-to-end demo was showcased at IBC 2025, with Trufo as a partner in the project.

In September 2025, Google launched the Pixel 10, the first phone with secure C2PA support that conforms to the upgraded trust model in C2PA v2. Many other phone producers are following suit, including Samsung, Xiaomi, and Vivo.

Software

This section will be updated shortly.

Publishers

This section will be updated shortly.

When to Adopt?

For any organizations whose branded content benefits from provenance, 2026 is the year to get pilot programs running. With the widespread addition of C2PA in phones and platforms, the value proposition is is here. With the launch of the C2PA conformance program, the standards are finally mature. With the growth of enterprise solutions like Trufo, the costs of implementation are manageable.