Does C2PA survive a customer download?

An AI image can leave a perfectly controlled generation system and become a different file the moment a customer downloads it. That is the point many teams miss: the source file is not automatically the file the customer receives.

This is technical information, not legal advice. A lawyer can assess whether a particular legal obligation applies to a particular service.

One file can become several

A common route is simple: generate an image, store it, show a preview in the browser, then provide a download. Yet the preview service, image optimiser, CDN or download endpoint may resize, recompress or repackage it. Each step can create a new file. A C2PA Content Credentials record in the original does not automatically travel with every new version.

How to test a customer download

1. Create one new test image through the normal production route.
2. Keep the original output exactly as it was issued by the generation step.
3. Download the same asset as a real customer would, without using an internal shortcut.
4. Check both files separately for their C2PA record.
5. Write down the URL or API route, date, file type and the two results.

If the original has a record but the downloaded copy does not, that is useful evidence: it identifies the technical hand-off to investigate. It does not mean a visible watermark fills the gap.

Places where records are often lost

Look first at browser preview generation, image-processing queues, CDN transformations, “download optimised” settings, ZIP/export jobs and file-type conversion. The relevant point is not the name of a tool; it is whether that specific route returns the same signed asset or produces a derivative without the record.

Keep the test repeatable

Run the same comparison whenever the delivery stack changes. A CMS, CDN or optimisation setting that is harmless for pixels can still change the file structure enough to remove or invalidate provenance. Our workflow-test record guide lists the evidence worth keeping, and our social-media guide explains why platform uploads are a separate test.

One practical next step

Pick the download route with the most customers today. Test one source file and one customer download this week. That gives you a concrete answer about the route people actually use.