Which AI Models Watermark Their Output?

Several major AI models now watermark their output, but coverage varies widely by provider and by content type. As of August 2026, Claude is the clearest confirmed example of an embedded, machine-readable text watermark applied with no opt-out. Google's SynthID also watermarks generated text inside Gemini. Most other providers mark images and audio today, and their text-watermarking status is either newer or not publicly confirmed.

This page compares Claude against the other major models on a factual basis. Layer3 Labs is an AI-automation consultancy, not a ranked vendor and not a party in this comparison. There is no winner here, and avoiding a watermark is not a goal. Provenance marking is a compliance and trust feature, so the useful question is which models mark what, and how confident you can be in each status.

Watermarking statuses change fast, and several vendors have shipped image provenance long before any text signal. Where a provider's current text-watermarking status is not clearly confirmed by a primary source, this page says so plainly and tells you to verify it directly. For the full background on how these marks work, see our guide to AI watermarking and the pillar explainer on the Claude AI watermark.

Claude (Anthropic) vs. Other major AI models: Side-by-Side

Which AI models watermark their output in 2026?

In 2026, Claude and Google's Gemini are the clearest examples of major models that watermark generated text, while image and audio watermarking is far more widespread across providers. Claude embeds an invisible text watermark and signed file provenance with no opt-out. Google's SynthID watermarks generated text in Gemini as well as images, audio, and video across Google's models.

Most other major providers watermark images and audio today, not text. OpenAI adds provenance to generated images and audio through ChatGPT and its API. Microsoft marks Copilot media with C2PA metadata and watermarks. Whether any of these ship an embedded text watermark right now is either newer or not publicly confirmed, so treat text and images as two separate questions.

The broader picture is that coverage is uneven and moving quickly. A model can mark images while leaving text unmarked, or mark text in one product but not another. Because statuses change, confirm each vendor's current position from a primary source before you rely on it for compliance or verification.

• Text watermark confirmed: Claude, and Google's Gemini via SynthID
• Image and file provenance widespread: OpenAI, Google, Microsoft, plus C2PA members
• Text status not confirmed for several providers: verify directly before relying on it
• No mark proves nothing, absence can mean an older model, a human author, or edited output

Claude (Anthropic): text watermark + C2PA, no opt-out

Claude is the clearest confirmed case of an embedded text watermark with no opt-out. Anthropic announced on August 11, 2026 that Claude models released on or after August 2, 2026 embed an invisible, machine-readable text watermark, produced by biasing token selection while the model generates text. The mark is designed to survive copy-paste and stay invisible to ordinary readers.

Claude also attaches cryptographically signed C2PA provenance metadata to supported files, including.png,.jpg, and.svg. The text watermark and the file metadata are two separate mechanisms: the statistical signal lives inside the text itself, while C2PA Content Credentials travel with the file as signed metadata.

The marking is applied at the model level, so no product surface can switch it off, and it covers the API, claude.ai, Claude Code, Claude Cowork, Claude Tag, and Claude accessed through AWS, Google Cloud, and Microsoft Foundry. Anthropic did this to meet EU AI Act Article 50(2), but chose to apply it globally, so every user gets marked output. One important limit: the mark shows text may have been processed by Claude, not that AI authored it, because people also use Claude to proofread, translate, and reformat human writing. Public detection tooling is forthcoming, not yet released, so you cannot verify the text watermark yourself today. Our pillar explainer covers the details.

Text watermarking vs image watermarking across providers

Text watermarking and image watermarking are different problems, and most providers solved the image side first. Marking a generated image or audio file is more mature: providers embed a signal like Google's SynthID into the pixels or waveform, and attach C2PA Content Credentials as signed metadata. Embedded text watermarking is newer and less universal, because a short block of text carries far less room to hide a durable, machine-readable signal.

On images and files, coverage is broad. OpenAI joined C2PA and adds provenance to images generated through ChatGPT and its API, having supported Content Credentials on DALL-E images since 2024. Microsoft marks Copilot images, audio, and video with C2PA-style metadata and watermarks, some of it gated behind admin or account settings. Meta and many others are C2PA members. So for pictures and media, several major models mark their output today.

On text, the confirmed set is smaller. Claude embeds a text watermark, and Google's SynthID watermarks generated text in Gemini. For providers whose text-watermarking status is not clearly confirmed, this page marks it as not confirmed rather than guessing. Two caveats apply to every provider: C2PA file metadata is trivially strippable by re-saving, screenshotting, or converting a file, and heavy editing may degrade a text watermark, though vendors generally have not published an exact threshold. Our AI watermarking guide explains the mechanics, and generic AI detectors do not read these vendor signals at all.

• Images and audio: broadly marked (SynthID, C2PA Content Credentials) across major providers
• Text: confirmed for Claude and Gemini; not confirmed for several others, verify
• C2PA metadata is strippable by re-saving, screenshotting, or format-converting a file
• Generic AI detectors do not read these provider watermarks; they only guess from style

The full comparison

Here is the full multi-vendor matrix as of August 2026, with unconfirmed statuses marked as such rather than guessed. Read text and images as separate columns, because a provider can mark one and not the other. Where a cell says "Not confirmed (verify)," treat it as a prompt to check the vendor's own documentation, not as a claim that the feature is absent.

The verification note matters. Several cells above are deliberately left as "Not confirmed (verify)" because a primary source did not clearly confirm a shipped text watermark for that provider. Statuses in this space change month to month, so before you rely on any single cell for a compliance decision, confirm it against the vendor's current documentation or announcement.

What this means when you choose an AI vendor

When you choose an AI vendor, treat provenance marking as a compliance and trust feature to plan around, not an obstacle to route past. If the EU AI Act Article 50 applies to you, marked output actually helps you meet the transparency obligation, because the machine-readable signal is part of what the rule asks for. Article 50 has extraterritorial reach, so US and UK companies serving EU users are affected.

For most businesses, the practical questions are simple. Which models mark the content types you generate, can the marking be turned off in your plan, and does any downstream partner require or forbid a given provenance signal? A model that marks its output can be an asset in regulated or reputation-sensitive work, because you can show where content came from.

Across the content-automation routines we run on our own portfolio of sites, the pattern we see is that provenance and disclosure rarely hurt real publishing workflows, and clarity about what each tool marks saves far more time than trying to detect or defeat a signal after the fact. When we advise clients on AI-vendor selection, we treat watermarking status the same way we treat data residency or security posture: a factual attribute to confirm up front, per vendor and per content type, and to re-check as it changes.

• Confirm marking status per vendor AND per content type (text vs image vs audio)
• If EU AI Act Article 50 applies, marked output supports compliance rather than blocking it
• Check whether marking is model-level (no opt-out) or setting-gated in your plan
• Re-verify periodically, statuses change and detection tooling is still maturing

The Verdict

Claude is the clearest current example of an embedded, machine-readable text watermark applied with no opt-out, and Google's SynthID also watermarks Gemini text. For text specifically, that confirmed set is small in 2026.

Image and file watermarking is far more widespread: OpenAI, Google, and Microsoft all attach provenance to generated images, and many providers are C2PA members. Read text and images as separate questions when comparing vendors.

For most businesses, provenance marking is a compliance and trust asset, not a problem, especially under EU AI Act Article 50. Because statuses change fast, confirm each vendor's current position from a primary source before you rely on it.