Directory · 11 entries

Provenance standards directory

This directory lists standards and published rules that record the origin and history of content, data or findings. Each entry comes from the issuer's own specification or code. The C2PA specification, for example, defines a manifest as the set of information about the provenance of an asset ², and IETF RFC 3161 describes time-stamps that support proof a datum existed before a particular time ⁴. Blank cells mean the document read did not state the fact.

Last checked 6 November 2026

11 / 11

Content Credentials: C2PA Technical Specification 2.2
Issuer
C2PA, a project of the Joint Development Foundation ¹
Type
Technical standard
What it records
Signed claims that reference assertions about an asset, bound to it by cryptographic hashes. Version 2.2 dated May 2025 ²
C2PA Trust List
Issuer
C2PA ²
Type
Technical standard
What it records
X.509 certificate trust anchors that issue certificates to hardware and software signers ²
C2PA soft binding
Issuer
C2PA ²
Type
Technical standard
What it records
A content identifier such as a fingerprint, used to match an asset to a manifest kept in a provenance store ²
Digital Source Type vocabulary
Issuer
IPTC ³
Type
Metadata vocabulary
What it records
How media was made, with terms such as digitalCapture, trainedAlgorithmicMedia and compositeWithTrainedAlgorithmicMedia ³
RFC 3161, Time-Stamp Protocol
Issuer
IETF ⁴
Type
Technical standard
What it records
Time-stamp tokens from a Time Stamping Authority that support proof a datum existed before a particular time. The authority sees only a hash ⁴
PROV-DM, The PROV Data Model
Issuer
W3C, Recommendation of 30 April 2013 ⁵
Type
Technical standard
What it records
Information about entities, activities and people involved in producing a piece of data or thing ⁵
PROV-O, The PROV Ontology
Issuer
W3C, Recommendation of 30 April 2013 ⁵
Type
Technical standard
What it records
The PROV ontology, one of four PROV Recommendations in the W3C PROV family ⁵
ICD 206 source reference citations
Issuer
Office of the Director of National Intelligence ⁶
Type
Official directive
What it records
Originator, identifier, title, date, classification and a source descriptor for each source behind an analytic judgment ⁶
ICMJE rules on secondary publication
Issuer
International Committee of Medical Journal Editors ⁷
Type
Editorial code
What it records
A notice in the secondary version that the paper was first reported elsewhere, with a full reference to the primary paper ⁷
Pressekodex guideline 2.2, symbol images
Issuer
Deutscher Presserat ⁸
Type
Editorial code
What it records
A clear label on illustrations that could be mistaken for documentary images, such as staged scenes or photomontages ⁸
SPJ Code of Ethics, provenance duty
Issuer
Society of Professional Journalists ⁹
Type
Editorial code
What it records
A duty to verify the provenance and authenticity of the methods, sources and technology used to produce news ⁹

Notes

The C2PA specification says its specifications should not judge whether provenance data is good or bad, only whether assertions are bound to the asset, correctly formed and free from tampering ².
An asset can become separated from its C2PA manifest through removal or corruption of metadata ².

Rules and charges change. Check the official source linked on this page before you pay or travel. Spotted an error? Email hello@evidencefamily.com.

Content Credentials: C2PA Technical Specification 2.2

C2PA Trust List

C2PA soft binding

Digital Source Type vocabulary

RFC 3161, Time-Stamp Protocol

PROV-DM, The PROV Data Model

PROV-O, The PROV Ontology

ICD 206 source reference citations

ICMJE rules on secondary publication

Pressekodex guideline 2.2, symbol images

SPJ Code of Ethics, provenance duty

Notes

Sources