Truepic

What is Truepic?

Truepic is a digital content authenticity platform that specializes in "provenance-based" security for photos and videos. Unlike detection-based systems that analyze content for deepfake artifacts after the fact, Truepic focuses on the "first mile" of content creation. It utilizes hardware-backed cryptographic signing and open standards to establish a permanent, tamper-evident record of how, when, and where a piece of digital media was captured, ensuring its integrity throughout its lifecycle.

Key Capabilities

Controlled Capture (Lens SDK): Employs a patented capture technology that integrates directly with mobile and hardware sensors. This ensures that metadata—including high-accuracy timestamps, geolocation data, and device sensor information—is cryptographically sealed the moment the shutter is pressed, preventing any "man-in-the-middle" manipulation between the sensor and the file.
Hardware-Backed Security: Leverages secure hardware environments, such as Trusted Execution Environments (TEEs) and Secure Elements on modern chipsets (e.g., Qualcomm), to protect the private keys used for signing media. This prevents keys from being extracted or used by unauthorized processes.
C2PA Standard Integration: As a founding member of the Coalition for Content Provenance and Authenticity (C2PA), Truepic embeds provenance data into an interoperable manifest (Content Credentials). These manifests contain signed assertions about the media’s origin and any subsequent edits, allowing for transparent, verifiable histories.
PKI-Based Trust Infrastructure: Utilizes a robust Public Key Infrastructure (PKI) to manage certificates and signing operations. This architecture allows media to be verified offline by any C2PA-compliant viewer or validator without requiring a connection to a central Truepic database.
Cryptographic Content Binding: Generates a SHA-256 hash of the media’s pixels and binds it to the signed manifest. Any post-capture alteration to the image or video data immediately invalidates the hash, making tampering detectable by standard validators.
Truepic Vision: An enterprise-ready application and API suite designed for businesses to request and receive verified photos and videos from remote users (e.g., policyholders or claimants) with built-in fraud prevention and authenticity checks.

Audience & Use Cases

Audience: Insurance Carriers, Financial Institutions, HR & Recruitment Teams, News Organizations, and Citizen Journalists.
Use Case: Insurance companies utilize Truepic to verify the authenticity of claim photos submitted via mobile devices, while news agencies use the technology to prove the provenance of visual evidence from conflict zones, defending against disinformation and synthetic media.

Technical Specifications

Standards: Founding member and implementer of C2PA (ISO/AWI 24367).
Security: Hardware-level TEE/Secure Element integration; PKI-based certificate management.
Integration: Mobile SDKs (iOS/Android); REST API; Enterprise Web Portal.
Verification: Interoperable with open C2PA validators (e.g., verify.contentcredentials.org).