If you ship a feature built on Claude, its output now carries a mark you did not add. That changes what you should tell your users, and it should not be treated as a detection tool.
What changed
Since 2 August, Anthropic has been watermarking Claude output globally, not only in the EU. Text gets an invisible statistical pattern that survives copy and paste. Generated .png, .jpg and .svg files get signed provenance metadata, closer to EXIF than to a visible badge. Models launched on or after that date support it at launch, and older ones are being retrofitted.
Why it happened
The driver is Article 50 of the EU AI Act, which came into force the same day. Penalties go up to 15 million euro or 3 percent of global revenue.
A product decision made above your head
If your app generates copy for customers, that copy is machine-attributable by default, and you should probably tell them.
It is not proof
Anthropic says plainly that metadata can be stripped by format conversion, editing or a screenshot. Absence of a watermark means nothing at all.
Worth reading the actual terms before someone in your company builds a detection feature on top of it.
Takeaways
- Claude output is now watermarked by default, worldwide.
- Customer-facing generated content is machine-attributable; consider disclosing it.
- Watermarks and metadata can be stripped, so a missing mark proves nothing.
- Read the terms before building detection on top of it.
Building something like this?
I'm Ahmed Mamdouh, a senior full-stack & AI engineer. I reply within one working day.
The systems I am proud of are built from boring parts
The best systems use boring parts like Postgres, a queue and a well-defined cache; the real engineering is in the failure handling.
MCP went stateless, and that matters
The July MCP revision went stateless with OAuth 2.0 and OpenID Connect, so MCP servers can now run behind load balancers and serverless.
What actually breaks when AI agents go to production
Production agents fail on state, partial failure and knowing when to stop, which are distributed systems problems, not prompt problems.