FAQ

What Axia verifies

• • Possession of a signing key by a verified publisher identity at the time of signing.
• • Control of a domain via DNS, bound cryptographically to each signature.
• • Integrity of the signed bytes — the content has not been altered since signing.
• • Inclusion of every signature in a public, append-only Merkle transparency log.

What Axia does not verify

• • Truthfulness, accuracy or editorial quality of the content.
• • Whether the content was authored by a human, an AI agent, or an automated system. Signatures attribute key possession, not human intent.
• • Whether content without a signature is fake, synthetic, or untrustworthy. Absence of provenance is not evidence of falsehood.
• • Moral, legal or regulatory legitimacy of the publisher.

How provenance works

• • Content is hashed with SHA-256. The hash, plus publisher metadata and disclosures, is signed with Ed25519.
• • The signature is appended to a public Merkle log. Periodic checkpoints commit the log state.
• • Anyone, anywhere, can recompute the hash and verify the signature against the publisher's public key.

Why provenance matters

• • It moves trust from probabilistic detection to verifiable evidence.
• • It gives publishers a way to stand behind their content with cryptographic accountability.
• • It gives regulators, journalists, platforms and citizens a common, open substrate to reason about digital content.

Axia and the EU AI Act / Spanish AI Law

• • Axia is not an AI content generator and is not a direct subject of the EU AI Act or the Spanish Anteproyecto de Ley de IA.
• • Art. 50 of EU Regulation 2024/1689 requires synthetic content to be marked with technically robust, interoperable and reliable solutions. Axia provides exactly that substrate: SHA-256 + Ed25519 + public Merkle log + C2PA-compatible manifests.
• • Axia preserves the AI-disclosure declared by the publisher as an append-only assertion bound to the signed content. Axia does not detect AI nor decide what counts as synthetic.
• • Non-compliance with Art. 50 can reach fines up to 7.5M€ or 2% of global revenue. Axia helps generative-AI providers and publishers produce verifiable evidence of disclosure and traceability.
• • This is not legal advice. Compliance is determined by the regulator and the controller — see the non-authoritative compliance mapping in Specs.

SPEC

Trust boundaries

SPEC

Identity governance