Your C2PA platform, on premises.
Desktop on every workstation, Console and keys in your server room, nothing going out. Click a room on the floor plan to see what happens there.
Photos are imported, captioned and signed on the newsroom’s workstations. Files never leave the room.
Edits and AI-generated elements are declared automatically, then signed with the organisation’s identity.
The compliance team checks, approves and applies the mandatory labels before publication.
The private key stays in the HSM. The Console governs workstations, policies and audit: metadata only, never files.
The beta, straight up.
Every feature shows its real status. What is in pilot is validated with you, on your infrastructure.
Five rules we don’t negotiate.
- Files are processed on the workstation.Never sent to a ProvSeal signing service.
- Private keys stay on their device.Workstation, token, smart card or your organisation’s HSM.
- The Console governs without seeing.Policies and audit, never the media.
- Test certificates stay tests.They serve demonstrations, never public trust.
- Trusted is earned.The status requires a chain recognised by the C2PA trust list.
What ProvSeal Enterprise is not
ProvSeal is a technical provenance system: it describes the declared origin of a piece of content, not its truth.
- A cloud signing API
- An enterprise browser extension
- An AI or fake detector
Install it on your premises first.
For 30 days, we deploy ProvSeal Enterprise with you, on your infrastructure.