Skip to main content
Encypher Logo

C2PA for Healthcare

How healthcare organizations use the C2PA standard so patients and platforms can check that health guidance came from them, against AI-made fakes.

Send a file to the signing API, get it back signed with the label inside, and anyone can check it for free without an Encypher account.
Signing is one APIAPI: Application programming interface: a way for one program to ask another to do a job, such as sign a file. call. Checking is free and needs no account.
Signed institutional contentDigital signature: Math that shows which key signed something and that it has not changed since. Any edit to the signed bytes breaks it.
Patient guides and notices carry your name. Patients and platforms can check it.
Digital source typeDigital source type: A field in the label that says how content was made: captured by a camera, made by AI, or a mix.
A label can record that you declared AI help. EU AI ActEU AI Act: The European Union's law on artificial intelligence, which includes rules for marking AI-made content. Article 50Article 50: The EU AI Act rule that AI-made content be marked in a form software can read, and deepfakes disclosed. makes marking a duty only for some AI output, with exceptions.
The actions assertionActions assertion: The part of a label that records what was done to the content, such as created, edited or redacted, and by what.
Edits and format changes are signed as steps, so each file keeps its own history.

How it works

  1. Create a free account.

    No card needed.

  2. Sign your next file or page.

    Your name and the time go into a C2PAC2PA: The Coalition for Content Provenance and Authenticity: the group that publishes the open standard for content labels. label inside it.

  3. Anyone can check it, free.

    The check shows who signed it, what they declared, and if it changed.

    Open the checker

Why healthcare needs a label

Provenance reads back a signed record: signed by Town Daily, made with AI: no, unchanged since signing. Detection runs unsigned text through an AI detector and returns a guess, such as 72 percent likely AI.
ProvenanceContent provenance: The record of where a piece of content came from and how it changed, carried with the content itself. is a record anyone can check. Detection is a guess with a score.

AI fakes of health advice spread under the names of real hospitals. Patients cannot tell the real page from a good fake. Records and scans also move through tools that drop their details.

Tested against the standard

A checker trusts a signature when the signer's certificate was issued by a certificate authority on the C2PA Trust List, and trusts the timestamp when it comes from an authority on the C2PA TSA Trust List. The Conforming Products List shows the signing tool was tested.
Trust is about who signed and when. It does not make the content true.

Encypher's product is on the official C2PA Conforming Products ListConforming Products List: The C2PA's public record of products that passed its conformance program., dated May 26, 2026. Our signing and timestamp services are on the official C2PA Trust ListsC2PA Trust List: The list of signing authorities that conforming C2PA checkers trust by default.. That matters when patient trust rests on every step.

Create. Mark. Endure.

Patient-facing content carries a checkable record of which institution published it.