Yes. Since 20 February 2026 a service that can create realistic AI audio, images or video of people or events must label the output prominently, embed permanent metadata with a unique identifier for the service, let no one remove either, block unlawful synthetic content and remind users of the rules every three months.
Evaluated on 18 October 2026 from SignUnder’s rule packs (ca-ai-transparency-act@2026.10.12, cn-ai-labelling-measures@2026.10.13, eu-ai-act-art50@2026.10.12, eu-code-of-practice@2026.10.12, in-it-rules-synthetic@2026.10.13, kr-ai-basic-act@2026.10.13, ny-gbl-396b@2026.10.12, platform-labels@2026.10.12). Your situation may differ: open these answers in the checker and change them.
These bind you.
Your service must not let users modify, suppress or remove the label or the metadata, including the unique identifier.
“the intermediary shall not enable the modification, suppression or removal of the label, permanent metadata, including the unique identifier”
Embed permanent metadata or another provenance mechanism, as far as technically feasible, including a unique identifier for the service that made the content.
“shall be embedded with a permanent metadata or other appropriate technical provenance mechanisms, to the extent technically feasible, including a unique identifier”
If your service can create realistic AI audio, images or video of people or events that could pass as real, label the output prominently, or for audio with a prefixed audio disclosure. Text and content that is plainly not realistic are outside the definition; routine editing, accessibility and translation are excluded.
“prominently labelled in a manner that ensures prominent visibility in the visual display that is easily noticeable and adequately perceivable”
Take reasonable technical measures, including automated tools, so users cannot create or share unlawful synthetic content: child sexual abuse material, non-consensual intimate imagery, false documents, weapons instructions, or content that falsely depicts a real person or event to deceive.
Remind users of your rules at least once every three months, and tell them that misusing synthetic-content tools may lead to penalties, removal, account suspension and, where the law allows, disclosure of their identity to a victim.
Every image you send through SignUnder comes back with signed Content Credentials, an invisible watermark and a fingerprint on record, with a public page where anyone can check it is yours. Early access is free.
Get an API keySignUnder is not a law firm and this is not legal advice. Every rule cites its primary source and the date we read it, so your own counsel can check our reading. The rule packs are published as JSON at /rules/index.json.