Anthropic has begun embedding machine-readable watermarks directly into text generated by its Claude models alongside cryptographic provenance metadata in generated files. The rollout formalizes Anthropic's commitments under the European Union AI Act's Article 50(2) Code of Practice on Transparency of AI-Generated Content, applying universally across consumer and enterprise interfaces worldwide.
The marking system operates at the model level rather than the application layer. For text generation, Claude embeds mathematical patterns into generated token distributions that remain imperceptible during human reading but are detectable through algorithmic inspection. For file outputs such as SVG, PNG, and JPG, Claude attaches Coalition for Content Provenance and Authenticity (C2PA) metadata containing cryptographic signatures to verify origin and detect unauthorized alterations.
Architecture and Cross-Platform Scope
The watermarking pipeline is enabled by default across all Claude releases deployed on or after August 2, 2026. This includes direct offerings through the Claude web client, the Claude API, Claude Code, Claude Cowork, and Claude Tag, as well as managed cloud deployments on Amazon Web Services (AWS), Google Cloud, and Microsoft Foundry.
Anthropic is also working to backport marking support to legacy models deployed before the August 2 cutoff date during the statutory transition period provided by EU regulations.
Technical Mechanisms and Operational Limits
The dual-track approach addresses distinct modalities:
- Text-level watermarking: Embedded directly into generated tokens during inference. The statistical markers are designed to persist across direct copy-paste actions and minor modifications without degrading generation quality, coherence, or readability.
- File provenance metadata: Implements the open C2PA standard to sign file assets cryptographically, establishing tamper-evident chains of custody for exported media.
Anthropic documented several structural limitations inherent to statistical watermarking:
- Attribution ambiguity: A positive detection signal confirms that Claude processed the text, but does not distinguish between original drafting, proofreading, translation, or document summarization.
- Signal degradation: Heavy editing, multi-stage paraphrasing, cross-language translation, or extremely short text snippets can reduce statistical confidence below detection thresholds.
- Metadata stripping: Standard file conversions, screen captures, and image re-encoding remove C2PA header blocks from generated image and vector assets.
Anthropic stated that third-party verification tools and detailed technical documentation on detection APIs will be released in forthcoming documentation updates.
