{"slug": "what-a-claude-watermark-can-cant-tell-you-about-authorship", "title": "What A Claude Watermark Can & Can’t Tell You About Authorship", "summary": "Anthropic announced plans to watermark text generated by its Claude models in compliance with Article 50 of the EU AI Act, drawing immediate criticism from writers and developers. The company's help page states that models launched in the EU from August 2 onward will support marking, but no current model carries a mark, and the marking is uneven by design, with content shorter than 200 tokens exempt. The EU's Code of Practice on Transparency of AI-generated Content has been signed by about 190 organizations, including Google, Meta, Microsoft, OpenAI, and Anthropic.", "body_md": "Anthropic shared its plans this week to mark text generated by Claude models in accordance with Article 50 of the EU AI Act. The reaction arrived immediately.\n\nWriters who use Claude to edit their own work have objected to that work carrying a mark. At the same time, developers raised a different set of concerns, and both sides have spent the week arguing about where watermarking belongs.\n\n## What’s Being Said, And What The Documents Say\n\nForbes [reported](https://www.forbes.com/sites/maryroeloffs/2026/08/11/claude-will-put-invisible-watermarks-on-ai-text-and-images-and-the-internet-isnt-happy/) how people were objecting to their own work becoming detectable as AI-assisted. TechCrunch [found](https://techcrunch.com/2026/08/12/some-claude-users-are-mad-that-anthropics-new-watermarks-will-catch-them-cheating-at-their-jobs-classes/) similar feelings on Reddit, alongside users arguing back at the complainers. Meanwhile, Decrypt [shared](https://decrypt.co/375594/anthropic-quietly-watermarking-ai-claude-output-builders-break) that open-source projects are emerging to bypass or disrupt these watermarks.\n\nSome reports suggest that the marking system is already in use. Anthropic’s help page [states](https://support.claude.com/en/articles/16266773-how-claude-marks-ai-generated-content) that models launched in the EU from August 2 onward will support marking at launch, and that work on earlier models is in progress. The page names no model that currently carries a mark.\n\nForbes points out that users cannot opt out, and Anthropic’s help page doesn’t mention this option either. What the coverage mostly leaves out is that marking is uneven by design. Anthropic acknowledges that marked content may not carry a detectable mark, and the Code doesn’t require watermarking of free-form text shorter than 200 tokens.\n\n## What Article 50(2) Requires\n\nArticle 50(2) requires providers of generative AI systems to mark outputs such as audio, images, videos, and text in a machine-readable way to indicate that they are artificially generated or manipulated.\n\nProviders have to make those marks effective, interoperable, robust, and reliable, as far as that is technically possible. What counts as possible depends on the type of content, the cost of the work, and where the technology generally stands.\n\nThe marking duty does not apply to the extent a system only assists with standard editing, or does not substantially alter the input data or its meaning. The Commission’s guidelines exclude certain outputs from this rule, including source code and short sequences of numbers, symbols, or letters.\n\nThe [Code of Practice on Transparency of AI-generated Content](https://digital-strategy.ec.europa.eu/en/policies/code-practice-ai-generated-content) offers a voluntary compliance framework. By the end of July, about 190 organizations had [signed up](https://digital-strategy.ec.europa.eu/en/news/strong-backing-code-practice-transparency-ai-generated-content). Signatories in Section 1 include Google, Meta, Microsoft, OpenAI, and Anthropic, while Section 2 includes Getty Images, Lenovo, and Lufthansa.\n\nArticle 50(2) puts the marking duty on the provider. Meanwhile, Article 50(4) imposes an additional obligation to label deepfakes and AI-generated texts published as public-interest information. The European Commission [clarifies](https://digital-strategy.ec.europa.eu/en/faqs/transparency-obligations-under-article-50-ai-act) that deployers cannot rely solely on the provider’s machine-readable mark to fulfill their disclosure duties. Article 50 carries four exemptions in total, which Roger Montti [covered](https://www.searchenginejournal.com/eu-commission-article-50-ai-transparency-law-has-four-exemptions/584528/) on August 3.\n\n## Why Implementation Is Uneven\n\nGoogle says SynthID marks text generated through the Gemini app and web experience. It [signed the Code on July 24](https://blog.google/company-news/outreach-and-initiatives/public-policy/eu-ai-act-transparency-code-of-practice/) and named Apple, ElevenLabs, Kakao, NVIDIA, and OpenAI as partners in watermarking that works across systems. In the same post, Google said it was concerned that adding more rules while the technology is still evolving could undermine Europe’s competitiveness goals.\n\nOpenAI’s [page on content provenance](https://openai.com/index/advancing-content-provenance/) lists C2PA metadata and SynthID for supported images, and SynthID for supported audio, which it added on July 31. They intend to support additional content types over time, but currently do not list text as a supported format.\n\nAnthropic names no model that currently carries a mark. It [says](https://support.claude.com/en/articles/16266773-how-claude-marks-ai-generated-content) marking will cover output from supported models worldwide, across its API, apps, and developer tools.\n\nMeta and Microsoft are signatories of Section 1, though SEJ didn’t find any specific policies on text-marking in their official materials as of August 13.\n\n## What A Mark Does Not Establish\n\nClaude might not be the original author of watermarked text because users often proofread, translate, summarize, or convert files, which can introduce a mark even if the ideas or words originate elsewhere. Additionally, the content may have changed after Claude processed it.\n\nAnthropic lists five reasons why marked content might not show a detectable mark:\n\n- The model predates support for marking.\n- The text was heavily edited, paraphrased, translated, or integrated into other writing.\n- The passage is too brief to produce a reliable signal.\n- File metadata was removed through format conversion, re-saving, or screenshots.\n- The surface did not support that specific marking type.\n\nThe [Code](https://digital-strategy.ec.europa.eu/en/policies/code-practice-ai-generated-content) applies watermarking to free-form text longer than 200 tokens. Its glossary refers to anything shorter as very short text, expecting this cutoff to decrease as methods improve.\n\nFor audio, images, video, and text in files circulated online, the Code generally requires two separate marks because no single technique meets all four requirements. Since free-form text cannot carry metadata, the Code accepts one layer of watermarking for this format, noting that watermarking in this format may be less reliable than for longer passages.\n\nThe Commission’s final Guidelines from July 20 list AI-generated translations among examples covered by the Article 50(2) exception, alongside grammar correction and spellchecking. Anthropic states that translated output can still bear a Claude mark. Therefore, a detected mark does not necessarily mean that Article 50(2) required marking that output.\n\n## Researchers Scrubbed And Spoofed The Watermarks They Tested\n\nAt ICML 2024, researchers from ETH Zurich’s SRI Lab [showed](https://proceedings.mlr.press/v235/jovanovic24a.html) that querying a watermarked model via its public API allows an attacker to infer enough about the scheme to remove or spoof the marks the paper previously considered safe. The cost was under $50, at an average success rate above 80%. A separate experiment covered existing text, in which at least 74% of good paraphrases of non-watermarked material were detected as watermarked, with an expected false-positive rate of 1 in 1,000.\n\nAt ICML 2025, another team [reported](https://proceedings.mlr.press/v267/cheng25c.html) nearly complete success against seven recent watermarking methods, at $0.88 per million tokens. Their paraphrasing attack targets watermark tokens without needing access to the watermarking algorithm or model.\n\nThe Code asks the companies that sign to test how well their marking holds up against deliberate attempts to copy, remove, regenerate, or alter it, and lists paraphrasing and translation among the everyday handling a mark should survive. Neither paper tested Anthropic’s implementation, which the company has not described in technical detail.\n\n## Who Can Check A Mark\n\nThe Code mandates that companies watermarking output must offer a way for people to verify it\n\nAnthropic will assist users and external parties in identifying its marks and plans to release technical details later. Google’s [SynthID](https://deepmind.google/models/synthid/) page offers guidance on verifying images, videos, and audio in Gemini and says its SynthID Detector accepts image, video, and audio uploads, which are being tested with journalists and media professionals. Google has also open-sourced SynthID’s text watermarking. SEJ [covered](https://www.searchenginejournal.com/google-brings-ai-content-verification-to-search/575320/) that verification reaching Search in May, where it applies to images.\n\nOpenAI’s verification tool supports images and audio. Currently, none of these tools allow the public to verify text. OpenAI [stated](https://openai.com/index/advancing-content-provenance/) that their image and audio verification tools do not confirm content was not generated by OpenAI when no signals are detected.\n\n## Why This Matters For Search Professionals\n\nContent teams ship AI-assisted copy to client sites every day. A growing share of that copy now leaves Claude carrying a machine-readable mark, which travels with the text when it’s pasted into a CMS and published.\n\nGoogle signed the same Code, along with Microsoft and Meta. These watermarks exist to be read by machines, and the companies that decide which ranks are among those that can read them. Whether marked content is treated any differently when it’s crawled, indexed, or surfaced has not been stated by anyone.\n\nThen there’s the everyday problem. Using Claude to clean up your own draft can put a mark in your own writing. A detection says AI may have processed the text, not that it wrote it. A miss says almost nothing, because older models, short passages, and heavily edited text all come back clean. But people may still see a detection hit as proof anyway.\n\n## Looking Ahead\n\nWatermarking is happening faster than we can read it. Anthropic hasn’t shared its detector yet, while Google’s covers images, videos, and audio, and OpenAI’s covers images and audio.\n\nThis gap creates some concern. Clients, universities, and marketplaces will soon start asking for proof that content is human-made, even before we have a clear way to provide that answer. The likely scenario is a market filled with AI-detection claims based on signals that weren’t meant to answer this question in the first place.\n\nInteroperability is the key factor here in determining how widely this idea spreads. If checking can be done easily by anyone in a single step, rather than having to query each provider separately, then marks will move from mere compliance tools to meaningful signals that platforms, publishers, and search engines can use at scale.\n\n## More Resources\n\n[Google Ads Now Requires Disclosure Labels On AI-Generated Content](https://www.searchenginejournal.com/google-ads-requires-disclosure-for-ai-generated-content/581925/)[Google Claims AI Training Is Fair Use In New Governance Paper](https://www.searchenginejournal.com/google-defends-ai-training-as-fair-use-in-governance-paper/580776/)[Google May Be Penalizing AI-Generated Content As Thin Content](https://www.searchenginejournal.com/google-may-be-penalizing-ai-generated-content-as-thin-content/583773/)\n\n*Featured Image: Cast Of Thousands/Shutterstock*\n\n[AI Search](https://www.searchenginejournal.com/category/digital/generative-ai/)", "url": "https://wpnews.pro/news/what-a-claude-watermark-can-cant-tell-you-about-authorship", "canonical_source": "https://www.searchenginejournal.com/what-a-claude-watermark-can-cant-tell-you-about-authorship/585754/", "published_at": "2026-08-14 19:00:39+00:00", "updated_at": "2026-08-14 19:09:04.349333+00:00", "lang": "en", "topics": ["ai-policy", "ai-products", "ai-ethics"], "entities": ["Anthropic", "Claude", "EU AI Act", "Google", "Meta", "Microsoft", "OpenAI", "Getty Images"], "alternates": {"html": "https://wpnews.pro/news/what-a-claude-watermark-can-cant-tell-you-about-authorship", "markdown": "https://wpnews.pro/news/what-a-claude-watermark-can-cant-tell-you-about-authorship.md", "text": "https://wpnews.pro/news/what-a-claude-watermark-can-cant-tell-you-about-authorship.txt", "jsonld": "https://wpnews.pro/news/what-a-claude-watermark-can-cant-tell-you-about-authorship.jsonld"}}