Provenance registry lookup
Check if a file is in the registry
Drop any image, video, audio, or PDF file. Archibal checks its content fingerprint against certified deliveries in the registry - even if the C2PA metadata has been stripped.
File bytes are not stored. Max 50 MB. Rate-limited to protect the registry.
About this lookup
- The registry uses our own content fingerprinting - a perceptual code derived from the content itself that survives transcoding, re-encoding, and format conversion, even after C2PA metadata has been stripped. It is the same idea behind the invisible provenance signals the big model providers ship - like the SynthID watermark Google and OpenAI embed in generated images - built to hold up through cropping, filters, and compression.
- A match shows the production org, declared AI tools, and compliance summary. Full report access requires the delivery link shared by the issuer.
- No match means the file is not in the Archibal registry, not that it is unverified - it may be certified through a different platform.
Questions about verification and the law
What does a match mean?
A match means Archibal holds the signed provenance for this file in its registry - the production org, the AI tools declared, and a compliance summary. Even if this copy had its C2PA metadata stripped, the content fingerprint still ties it back to the original certified record.
How does it recognize a file after the metadata is stripped?
Archibal computes a content fingerprint - a perceptual code derived from the pixels or audio itself, not from the file metadata. It survives re-encoding, resizing, and format conversion, so a stripped or re-exported copy still resolves back to its original record. It is the same idea behind the invisible AI-provenance signals the large model providers ship - like the SynthID watermark Google and OpenAI embed in generated images - which is designed to hold up through cropping, filters, and compression.
Does this prove EU AI Act (Article 50) compliance?
Article 50 (which applies from August 2, 2026) points at machine-readable marking of AI-generated media reaching EU audiences. Archibal produces exactly that - C2PA content credentials, a content fingerprint, and a signed certificate. Whether a given asset is fully compliant is a call for your compliance team, but this is the evidentiary record the obligation is built around. See the compliance overview for detail.
What about US and other disclosure laws?
The same signed provenance and certificate support disclosure obligations beyond the EU - US state deepfake and AI-labeling laws, platform policies, and advertising rules. The field guide to AI disclosure laws covers the wider landscape.
What if there is no match?
No match means the file is not in the Archibal registry, not that it is unverified - it may have been certified through a different platform, or never registered at all. Archibal only vouches for what passed through it.
Archibal · archibal.ai