OpenAI GPT Image C2PA notes

OpenAI GPT Image and C2PA

Answer first: ChatGPT / GPT Image PNG exports often include Content Credentials. Trust status depends on whether the certificate chains to the current official C2PA Trust List, not on the word OpenAI.

Key facts

Last tested: 2026-09-17, engine 1.1.0.
Verification uses the uploaded original bytes.
Valid signature + failed binding is not shown as “signature invalid”.
A signer string of OpenAI does not infer GPT-Image unless that model string is present.

Evidence

C2PA present: depends on export path. ChatGPT/site downloads often have it; screenshots/social forwards often do not.
digitalSourceType: commonly trainedAlgorithmicMedia.
Official trust: only if the leaf certificate chains to the official PEM Trust List.
China AIGC: OpenAI exports are not a China implicit-label scheme.

Method

Roma Verify verify_bytes runs the C2PA Reader on the original upload, without a Pillow resave.

Limits

Original customer samples are not published. Vendor updates can change results. This is not OpenAI documentation.

Author: Roma Verify Editorial · Reviewed: Roma Verify Engineering · Updated: 2026-09-17

OpenAI GPT Image and C2PA

Key facts

Evidence

Method

Limits

Sources