Anthropic will embed invisible watermarks successful matter produced by its caller Claude models and see signed provenance metadata pinch generated files, arsenic elaborate successful a support article. This marking is implemented worldwide, not conscionable successful the European Union. According to Anthropic, a detected people indicates that Claude whitethorn person processed the content, but it does not corroborate that Claude authored it.
These marks use to outputs from supported models done the API, the Claude applications, Claude Code, Cowork, and Tag, arsenic good arsenic those accessed via AWS, Google Cloud, and Microsoft Foundry.
What Anthropic Committed To
Anthropic signed the EU AI Act’s Article 50(2) Code of Practice connected Transparency of AI-Generated Content, arsenic a supplier of some generative AI models and generative AI systems. Claude models launched successful the EU connected aliases aft August 2, 2026 support machine-readable marking astatine launch. Models released earlier autumn nether a modulation period, and the institution says it’s moving to adhd marking support to those arsenic well.
The European Commission counted astir 190 signatories by the extremity of July. Google, Meta, Microsoft, Mistral, and OpenAI joined Anthropic connected the supplier section, which covers machine-readable marking and detection.
I covered OpenAI’s determination to scrap its ain watermarking plans successful September 2024, aft a institution study recovered almost 30% of ChatGPT users would usage it little if watermarking was added.
How The Marking Works
Text gets an embedded watermark that Anthropic says doesn’t alteration the meaning, quality, aliases readability of a response. Because the people is embedded wrong the text, it stays intact erstwhile copying and pasting and, arsenic Anthropic notes, “may persist done immoderate editing.” This watermarking is implemented astatine the exemplary level, truthful it appears successful immoderate Claude merchandise the matter comes from.
Generated files successful .svg, .png, and .jpg formats see signed metadata that follows the C2PA unfastened standard. This records really each record was created and shows whether it has been tampered with.
Anthropic’s limitations section states that proofreading, translation, summarizing, and record conversion whitethorn consequence successful a people moreover if the original ideas and matter travel from elsewhere. Moreover, contented from Claude mightiness deficiency a detectable people if created by an older model, heavy edited, aliases excessively short to supply a clear signal.
Roger Montti discussed Article 50’s 4 exemptions connected August 3. Two of them onshore connected edited copy, nether different obligations.
Systems that only assistance pinch modular editing tin autumn extracurricular the marking requirement, provided they don’t substantially change the input aliases its meaning. Published matter that has undergone qualifying quality reappraisal aliases editorial power tin beryllium exempt from the disclosure requirement, erstwhile personification holds editorial work for it. So a Claude people tin look connected transcript that its patient has nary responsibility to label.
What Claude Marks & What It Means
Text from supported Claude models
Hidden watermark
Supported generated files
C2PA signed metadata
.SVG, .PNG, .JPG
Human-written matter Claude processes
Edits, translations, summaries, aliases conversions whitethorn besides transportation a mark.
Detected people = imaginable Claude processing
It does not beryllium Claude authored the content.
No detectable people does not norm Claude out. Older models, dense editing, aliases short matter whitethorn not nutrient a detectable signal.
Whether The Marks Survive Editing
The support article doesn’t specify really overmuch editing is needed to region a watermark. TechCrunch reported that it reached retired to the institution for explanation but hadn’t received a consequence by the clip of publication.
Alex Cui, CTO and co-founder of GPTZero, published a method explainer connected X arguing that matter watermarks tin beryllium defeated. GPTZero sells AI discovery package that scores matter by shape alternatively than checking for watermarks, and the institution has argued since 2024 that watermarking doesn’t region the request for independent detection.
In his testing, Cui noted that watermarks tin beryllium mislaid done aggravated paraphrasing, and free devices person bypassed Google DeepMind’s SynthID. He was describing the wide method frontier labs use, not Anthropic’s ain version, which hasn’t been published. His tests ran against different systems, because Anthropic hasn’t published its discovery system yet.
Jonas Geiping leads a instrumentality learning information group astatine the ELLIS Institute Tübingen and studies watermarking. He said paraphrasing tin region a watermark, but not each paraphrase will. By his account, stripping 1 retired of a agelong archive takes much than a ray pass, because capable of the original phrasing has to go.
Why This Matters
A writer who drafts their ain transcript and runs it done Claude for a cleanup walk ends up pinch marked text. So does a translator moving from personification else’s article. Anthropic names some successful its limitations, which is why a affirmative cheque shows Claude was progressive and thing astir who did the writing. Any argumentation that treats a deed arsenic impervious of authorship inherits that gap.
Looking Ahead
Anthropic says it will widen marking to models released earlier August 2. No day is attached.
Cui based on that nationalist discovery cuts some ways, giving group a measurement to cheque contented and giving anyone moving connected removal thing to trial against. Google keeps SynthID verification wrong its ain products, and I covered that description reaching Search successful May. Anthropic has said it will support discovery by users and 3rd parties and people method documentation, without saying yet what that entree will look like.
Featured Image: frank333/Shutterstock
English (US) · 
Indonesian (ID) ·