§ EVIDENCE ROOM · CHAIN OF CUSTODY FOR AI MEDIA
Labelled — and still labelled after Instagram.
EU AI Act Article 50 has applied since 2 August 2026, and the last marking grace period ends 2 December 2026. But platforms strip embedded manifests on upload, so a compliant asset becomes non-compliant at distribution. ProvenanceGuard inspects your asset, seals it with a signed provenance assertion, registers its fingerprint, and issues a public verification page — then (paid) re-checks what survives each platform's transforms and exports the evidence pack your client can hand to a regulator.
§1 — Seal one asset, free
A complete job, no account, no key: real byte-level inspection (C2PA/JUMBF markers, XMP, EXIF, prior assertions), a signed assertion embedded in a sealed copy, a labelled copy with a visible custody strip, a fingerprint registered in our lookup registry, and a public verification page.
Honest limits: the signed assertion is a ProvenanceGuard XMP assertion (HMAC-signed), not a C2PA manifest. If a file already carries a real C2PA manifest, we report it — we do not forge one.
§2 — Why assets lose their labels
Platforms strip metadata
Re-encode, resize and metadata-stripping on upload remove exactly the layers the law asks you to add. Your file leaves compliant and arrives naked.
Fingerprints survive
A registered SHA-256 + perceptual fingerprint can be matched after transforms, and a visible label survives metadata stripping because it lives in the pixels.
Evidence is the product
Paid plans add per-platform survival re-checks (local simulations, labelled as such) and an evidence pack: hashes, tool, timestamps, and disclosure wording for EU / California / New York.