C2PA present
A XenLook-signed public sample. Inspect after download to see the provenance record.
Korea 2027-03 · Japan 2027-06Legal & policies →
Pilot · C2PA review in progress · Korea Mar 2027 · Japan Jun 2027 · Korean model law
Copyright C-2026-036487 · Patent app. 10-2026-0100026 (not yet registered)
Pilot · KR Mar 2027 · JP Jun 2027
In the age of generative AI,
provenance
verified
Check provenance and change records for photos, video, audio, or documents. No install.
Content Credentials (C2PA) are a source sticker inside photo and video files. XenLook is the CA portal that issues and verifies them.
C2PA Trust List & Generator under review — pilot until listed · KR→JP.
Overview
Site · learn · pipeline · certificate
Four pillars on the home page — open each card for detail.
Right now · Evidence
Verify the file and read the manifest
Drop a file to see whether a provenance record exists and whether the file changed. Next to it is the manifest—the ingredients label inside the file.
We do not combine the six checks into one score.
Drop a file on the left — results open in a popup; history stacks on the right. Download the signed and unsigned samples below to compare.
Inspect (max 25MB · Read-only diagnose · file not modified)
saas_member_inspect
saas_member_signupCompare samples
A file with C2PA, and one without
Download both and drop them into inspect. The signed file has a provenance record. The other does not — that is not proof of tampering.
C2PA absent
A comparison photo with no provenance record. Inspect will not find one.
3 steps
How a provenance sticker is attached
① Attach a record ② Seal with a certificate ③ Anyone can inspect. You don’t need the jargon—just the flow.
New here? Start here
Does this photo match its provenance?
In the generative-AI era, XenLook is a pilot CA for provenance and integrity checks.
Manifest
The ‘source record’ embedded in a file — like a nutrition label. It travels with the photo/video and stores who made it, AI use, and who signed. We also call it a source sticker or content ID.
Verify
Upload a file to check whether the sticker exists and the seal is intact. Home ‘Inspect file’ does this.
Trust List
C2PA’s official CA roster. XenLook is not listed yet — some tools may show pilot/unlisted. We do not hide that.
Case study: media XenLook actually signed
Photos and video XenLook actually signed — tap to inspect.
Expert · operations
Programs, trust list, operations
Expert · operations
Programs, trust list, operations
Trust · Compare
Where we are — honestly
Honestly: XenLook is a Korea pilot CA. We are not yet on the official C2PA Trust List. Signing and verify here work for learning/pilot; global ‘trusted’ display (e.g. Adobe) comes after listing.
portal_flagship_trust_lead
- portal_trust_kind_memberContent Authenticity Initiative (CAI) memberXenLook is a CAI industry coalition member (Adobe, Microsoft, BBC and others). We align to C2PA, run a Korea pilot CA, XMSE signing, and this public portal.
- portal_trust_kind_programC2PA CA & Generator programsExecuted agreements; conformance evidence submitted. Trust List listing not claimed until C2PA confirms.
- portal_trust_kind_selfIMDA AI Verify (self-assessment)Voluntary self-assessment across ConvAI and creative studios — governance docs and safety harness published.
- portal_trust_kind_selfCSA STAR / cloud operationsCloud security posture, MFA, logging, and incident response targets for production infrastructure.
- portal_trust_kind_gateWCAG 2.2 AA gateAutomated accessibility verification on public studios (verify:wcag gate, VPAT SSOT).
- portal_trust_kind_securityportal_trust_sec_titleportal_trust_sec_body
CAI membership ≠ C2PA Generator certification ≠ Trust List CA listing ≠ Adobe Content Credentials “trusted”.
Voluntary self-assessments and internal gates are not the same as government certification. We label each item clearly.
Issue (max 25MB · 5-stage pipeline) →
Experts & operations (optional)
Issuance, transparency, programs — skip if you only want to check a file
Experts & operations (optional)
Issuance, transparency, programs — skip if you only want to check a file
CA pilot
…
Generator
…
Composite trust score
—
CRL
—
Portal actions
C2PA Trust List & Generator under review — pilot until listed · KR→JP.
Certificates & RA
Status & repository
Compliance & legal
Two programs on this site
XenLook runs both a Certificate Authority (issues signing IDs) and a Generator product (signs media). This section shows live status for each.
CA Program
C2PA Certification Authority
Issues claim-signing certificates so tools can attach Content Credentials to files.
- Agreement executed
- —
- Phase
- —
- Trust List
- Not listed (intake pending)
Generator Program
XMSE
Signs AI-generated media in production (XMSE) and supplies conformance evidence to C2PA.
- RFI submitted
- —
- Assurance
- AL1 · —
XenLook operates C2PA Certification Authority and Generator Product programs under executed agreements (2026-06-13). Trust List and CPL listing are not claimed until C2PA confirms.
Pre–Trust List operations. Tests validate issuance, revocation, and signing pipelines. Public marketing must not claim Trust List membership until C2PA confirms listing.