For data protection officers · EU AI Act — Article 50
Article 50 readiness, without your content leaving your network
Mark every AI-generated asset. Keep an independent, tamper-evident audit log. Hand the regulator proof the day they ask.
02 · The obligation
Article 50 applies from 2 August 2026
If your products generate images, video or audio for EU users, you must ensure outputs are marked in a machine-readable format and detectable as artificially generated.
The marking must be effective, interoperable, robust and reliable — a note in EXIF metadata that disappears on the first re-upload does not qualify.
Art. 99(4) — penalties
€15M
or 3% of worldwide annual turnover, whichever is higher.
03 · The audit
The day the regulator asks, you’ll need records
“Show that your outputs were marked.”
Per-asset evidence: which marks, which policy version, which timestamp — not a policy PDF.
“Show it was marked at the time, not backfilled.”
An internal database row proves nothing — anyone with admin access could have written it yesterday.
“Show me this specific asset’s provenance.”
A file found in the wild — stripped, re-encoded, screenshotted — must still resolve to its origin.
Your compliance record should not depend on trusting your own infrastructure — or ours.
04 · The platform
Mark, record, verify — one SDK call
Mark
Signed C2PA manifest + invisible watermark on every image, video and audio output. Survives stripping, re-encoding and screenshots.
Signed with your own KMS key
Record
Every marking becomes a signed event in a tamper-evident log, anchored daily to a qualified EU timestamp authority and write-once storage.
Nobody can backdate it — including us
Verify
Any asset resolves back to tenant, app, policy and timestamp — via public portal, in-VPC check, or an offline tool auditors run themselves.
Don’t trust us — run the CLI
05 · Your data
Your content never leaves your network
Your infrastructure
Marking container runs in your VPC
The only component that touches content. Signs with your KMS/HSM key — the private key never leaves your custody. Keeps marking even if our platform is unreachable.
Our platform
Receives evidence, never content
Hashes, opaque payload IDs, signatures, metadata. No personal data in content form crosses the boundary — your GDPR processing map barely changes.
06 · The evidence
What you hand the regulator
Regulator report — one click
A generated PDF: coverage statistics, policies in force, the full anchor list, and a chain-verification attestation for the requested period.
Independent proof
Every event carries an inclusion proof bound to a qualified EU timestamp. Auditors verify it offline with an open tool — no trust in us or you required.
Coverage monitoring
Dashboards and alerts flag any app or pipeline producing unmarked output — you find the gap before an auditor does.
Auditor access
A read-only auditor role gives external reviewers scoped access to the log and reports — no screenshots, no CSV exports over email.
07 · Deployment
One container, one SDK call
No content pipeline rebuild. Drop the marking container next to where you already generate media, point one call at it, and the evidence chain starts the same day.
- 01Deploy the container in your VPC — Helm chart or Docker Compose
- 02Connect your KMS — AWS, GCP, Azure or PKCS#11 HSM
- 03Add one call — mark_image(bytes) — Python or Node SDK
- 04Evidence chain and audit log are live from the first marked asset
from artemis import mark_image
result = mark_image(
image_bytes,
app_id="avatar-studio",
entity_id="acme-eu",
)
# → C2PA-signed + watermarked bytes,
# → plus a signed evidence event, logged & anchored08 · Pricing
Priced on volume, never on features
Every product capability ships on every plan. You pay for marked assets — one signed manifest, whether it’s an image or a two-hour video. We don’t tax video.
Starter
€249 /mo · HT
- Included volume
- 50,000 marked assets / month
- Overage
- €2 per extra 1,000 assets
Growth
Most teams€790 /mo · HT
- Included volume
- 500,000 marked assets / month
- Overage
- €1 per extra 1,000 assets
Enterprise
Price on demand
- Included volume
- Custom / committed volume
- Overage
- Custom — committed-use discounts, tailored to your needs
All prices are HT (excl. VAT). A valid VAT number is required at checkout: EU businesses outside France are reverse-charged (0%); French businesses are charged 20% VAT. Metered from the control plane. Overage falls as you scale, so plans self-select.
Included on every plan
No feature gates. The compliance-SaaS incumbents nickel-and-dime exactly these — we ship them to everyone.
- C2PA manifest + invisible watermark on image, video & audio
- Daily anchoring to a qualified EU timestamp authority + write-once storage
- Bring your own key — AWS, GCP, Azure KMS or PKCS#11 HSM
- Multiple legal entities, each independently anchored
- SSO / SAML
- Self-hostable offline verifier + public verification portal
- One-click regulator report (PDF)
- Coverage monitoring dashboards & alerts
- Read-only auditor seats
- Configurable retention
Enterprise adds
Services — they cost our time, not a feature flag
- · SLA commitments
- · DPA negotiation
- · Security-questionnaire support
- · Committed-use pricing & volume discounts
09 · Next steps
A 30-day pilot on one real pipeline
Week 1
Container deployed in your VPC, KMS connected, first assets marked.
Weeks 2–4
Evidence chain anchoring daily; coverage dashboard live; robustness spot-checks on your real outputs.
Day 30
Your first regulator-style report — the document you’d hand an authority tomorrow.