◈ ABOUT VERIMAGO

Content provenance for a transparent internet.

Verimago builds the certificate infrastructure that gives every photo and video a clear, cryptographic label — Authentic, AI Enhanced, AI Created, or Unverified — so audiences always know exactly what they're looking at.

Founded on a principle

Verimago was founded on the belief that audiences deserve to know what they're looking at. As AI-generated and AI-enhanced media become indistinguishable from authentic footage, we set out to build the cryptographic infrastructure the information ecosystem was missing — not to restrict AI, but to label it clearly.

The technology

We use Ed25519 elliptic-curve cryptography — the same algorithm trusted by OpenSSH and Signal — to create unforgeable digital signatures. Every certificate is issued through a witnessed key ceremony; private keys are sealed in hardware security modules and never exposed.

The registry

Every signed photo and video gets a manifest published to the Verimago registry — a permanent, publicly auditable record. Anyone can verify any piece of media in seconds by entering its SHA-256 hash at staging-registry.verimago.io. The manifest includes the content classification so audiences see the full picture.

How Verimago certificates work

The same chain-of-trust model used by SSL certificates — applied to media authenticity.

Step 01
🏛️

Identity verification

We verify editorial independence, domain ownership, and jurisdiction — the same standard as Extended Validation SSL.

Step 02
🔑

Key ceremony

A witnessed ceremony generates an Ed25519 keypair. The private key is immediately sealed in a hardware security module and never exposed.

Step 03
📷

Sign at capture

The Verimago camera app and signing tool create a cryptographic manifest the moment media is captured or published — before any edits.

Step 04
🔍

Verify anywhere

Anyone can verify any photo or video by entering its SHA-256 hash at staging-registry.verimago.io. Verification is instant and free.

Four content classifications

Verimago is not anti-AI — it's pro-transparency. We support every type of content; we simply ensure audiences know what they're looking at.

Each certified piece of media carries one of these four states.

Authentic

Original, unaltered content. No AI modifications applied. A real recording of real events.

AI Enhanced

Real content processed with AI tools — noise reduction, upscaling, color grading, background blur. The underlying event is real; AI processing was applied.

AI Created

Fully or substantially generated by AI. Not a recording of real events — generative AI, CGI, synthetic media, AI avatars.

Unverified

No Verimago certificate. Content origin and authenticity are unknown.

Security & trust

Verimago certificates are designed to the same standards as the public key infrastructure (PKI) underpinning HTTPS on the web. Certificate issuance requires a witnessed key ceremony. Private keys are stored in FIPS 140-2 Level 3 hardware security modules. All certificate operations are logged to a tamper-evident audit trail.

Ed25519
Elliptic-curve signatures — same algorithm as OpenSSH and Signal
HSM-backed
FIPS 140-2 Level 3 hardware security modules for private key storage
C2PA compatible
Manifests follow the Coalition for Content Provenance and Authenticity standard
Public registry
staging-registry.verimago.io — every manifest is permanently, publicly auditable

Ready to give your audience full transparency?

Apply for a certificate and let your audience see exactly what your content is — Authentic, AI Enhanced, or AI Created — with cryptographic proof.

Apply for a certificate →View pricing