Disclaimer: Verbitas helps AI providers implement technical measures aligned with EU AI Act Article 50. Verbitas does not provide legal compliance advice and does not guarantee Article 50 compliance. Consult qualified legal counsel for compliance obligations.

Sign every AI output. Before it leaves your system.

Your platform generates millions of images. None of them carry a provenance record. A single stripped image circulating as "news" is a trust and liability problem. Verbitas fixes this in one API call.

The problem

No provenance by default

AI-generated content has no built-in record of origin. The moment it leaves your system, it's indistinguishable from unattributed content.

Metadata gets stripped

Social platforms, CMS uploads, and screenshot sharing strip file metadata. Even if you add EXIF data, it disappears.

Regulatory pressure is real

EU AI Act Article 50(2) requires machine-readable and imperceptible marking of AI-generated images, audio, and video.

How to integrate

Call client.sign() after generation in your Celery worker, Lambda function, or wherever you process outputs. One function call.

Register a Verbitas webhook endpoint. POST your generated file; receive the signed version with manifest URL. No SDK required.

Direct HTTP calls to api.verbitas.io/v1/sign. Any language, any platform, any pipeline.

import verbitas

client = verbitas.Client()  # reads from env

def sign_generated_image(image_path: str, model: str) -> dict:
    result = client.sign(
        image_path,
        recipe="image-genai-v1",
        metadata={"model": model}
    )
    return {
        "asset_id": result.asset_id,
        "manifest_url": result.manifest_url,
        "verifier_url": result.verifier_url,
    }

How Verbitas helps implement Article 50

Article 50 requirement Verbitas mechanism Notes
§50(2) machine-readable marking C2PA 2.4 manifest embedded in file Open standard; any C2PA verifier can read it
§50(2) human-imperceptible marking TrustMark (image) / AudioSeal (audio) / VideoSeal (video) Survives JPEG compression, resize, re-encode
§50(4) deep-fake disclosure disclosure_assertion in recipe manifest Deployer must also surface visible disclosure in UI
Record-keeping / audit Append-only audit log + downloadable exports SOC 2 Type I in progress
Manifest recovery Soft-binding: watermark + perceptual fingerprint Survives metadata stripping

The above is a simplified technical mapping. Legal compliance with Article 50 is the AI provider's responsibility. Consult qualified legal counsel for your specific obligations.

Sign AI outputs before they leave your system.

One API call. C2PA + TrustMark. Free tier for experiments.