Does Replicate sign your AI output? What its terms say

Does Replicate attach a C2PA manifest or a watermark?

Nothing in Replicate's documentation mentions Content Credentials, C2PA or output marking, as searched on 12 October 2026. Some model listings expose an apply_watermark input inherited from the model's own code, which is the model author's invisible watermark, not a signed manifest and not something Replicate attaches or verifies (seen on model pages via search; UNVERIFIED on a Replicate documentation page).

What do Replicate's terms say about who is responsible?

The terms were last updated on 1 April 2026. Two clauses matter here:

"CUSTOMER IS ULTIMATELY RESPONSIBLE FOR ITS USE OF ANY MODELS OR OUTPUT" — Replicate Terms of Service, Section 8.9, Artificial Intelligence, read 12 October 2026

"You are solely responsible for your Content, Community Models, and Customer Data" — Replicate Terms of Service, Section 3.1, Customer Controls, read 12 October 2026

The terms also prohibit "representing or misleading people into believing that the use of the Services or outputs are human-generated" (Section 2.7(d)(x)(e)). That is a rule about deception, not a marking requirement; a signed manifest in your own name is the surest way to comply with it.

So who is the provider under Article 50(2)?

The Commission's guidelines on Article 50, adopted on 20 July 2026, treat a business that integrates a model by API into its own user-facing system as the provider of that AI system, answerable under Article 50(2) for what the system generates (our reading of 8 October 2026, shared by the law-firm notes we have seen). Replicate's terms point the same way. So if your users see images, audio or video that Replicate generated for you, the marking obligation is yours, and it is not discharged by anything Replicate attaches.

What this means if you generate through Replicate

Nothing arrives marked. Every image, clip or audio file you get back from Replicate is unmarked, and the terms say what happens to it is yours to manage. If your users are in the EU and your system was on the market before 2 August 2026, the grace period for marking ends on 2 December 2026.

SignUnder is built to sit in front of APIs like this one and sign every output under your own name, with an invisible watermark and a public verification page; it is pre-launch, and the waitlist is on the homepage.

Changes

• 2026-10-12 — First published.

Read from Replicate's own terms and documentation on 12 October 2026, and its region pages on 8 October 2026. Platforms change; tell us if this is out of date. SignUnder is not a law firm and this is not legal advice.