Technology

Three layers. Strip one, the others still work.

Content Credentials, content fingerprinting, and forensic watermarking in one pipeline. Each layer is optional. Turn them on or off, plug into what you already run.

Layer 1

Content Credentials

A cryptographic manifest embedded in the file itself: origin, creator identity, license terms, production history. Signed and tamper-evident. If someone changes the declaration after sign-off, the signature breaks and the change is visible. Built on the C2PA standard.

Survives file copy, save-as, direct transfer.

Stripped by social platforms, most CMSes, CDN re-encoding, screenshots.

            
            
            
            Content Credentials manifest
          
{
"claim_generator": "Diker/1.0",
"signature": "ES256",
"assertions": [{
"action": "c2pa.created",
"softwareAgent": "PhotoDesk/4.2"
}, {
"license": "Editorial only",
"ai_training": false
}],
"timestamp": "2026-03-12T09:14Z"
}

Layer 2

Content fingerprinting

Computed from the pixels, not the metadata. Strip every IPTC field, convert the format, compress it. The fingerprint still matches. Submit any derivative to the registry and get back the full provenance record.

Survives metadata stripping, format conversion, compression, re-encoding.

Fingerprint comparison

Original

MATCH

Found copy

ISCC · ISO 24138:2024

Layer 3

Forensic watermarking

An invisible signal embedded in the pixel data. Survives screenshots, cropping, social media recompression, format conversion. When the metadata is gone and the fingerprint can't match, the watermark is still there.

Already using another watermark vendor? Diker wraps it. Don't need watermarking? Turn the layer off. Each layer is independently configurable.

Extracted signal (amplified)

Compression

Screenshots

Cropping

Social media

Re-encoding

Format conversion

Recovery

Stripped file in, full record out.

An image surfaces with no metadata. Diker checks all three layers and returns the full provenance record.

Input

Image with no metadata

photo.jpg

Lookup

Credentials: stripped

Fingerprint: matched

Watermark: matched

Recovered

Rights holder

Wire service

Licensee

Publisher

Terms

Editorial, 12mo

Chain of custody

Wire → Publisher → Syndication

Integration

Fits into what you already run.

Send a file, get it back with provenance embedded. Your production tools stay the same.

          
          
          
          api.diker.io
        
// Protect an image
POST /v1/protect
{
"status": "protected",
"layers": {
"c2pa": true,
"fingerprint": true,
"watermark": true
}
}

API

Single image or batch. Send a file, get the protected version back.

FTP

Watched folder. Drop files in, pick them up protected.

Configurable

Each layer on or off. Bring your own watermark vendor if you have one.