Know it's cleared and current.
Prove where it came from.

Fabric finds assets by their rights and flags current versus superseded, with permissions and version time-awareness enforced inside the query itself. So when marketing asks to ship a still or a cut, you can tell at a glance whether it is the version legal actually cleared, rather than an expired license or a superseded lookalike, before it goes out the door.

Yes. Forge returns generated images with C2PA Content Credentials carrying an AI-source assertion, and applies visible watermarking on video, image and document outputs. The provenance travels with the file, so when legal or a partner asks whether an asset is AI-generated and how it was made, the answer is embedded in the asset instead of living in someone's memory.

Gateway resolves permissions per question and writes a severity-tagged audit row on every query, which you can export to your own SIEM. It is read-only by design, so a question can never change your data. That gives you a complete, exportable record of who asked for what and when, instead of reconstructing access from folder timestamps after the fact.

No, and we do not claim to be. Asset Foundry is built to a SOC 2 Type II aligned engineering posture and designed for MPA content-security best practices, which describe engineering discipline rather than third-party certification. That posture includes SSO over OIDC and SAML 2.0, authenticator-app MFA, role-based access and severity-tagged audit logging you can export. The fastest way to see it against your own library is the four-week pilot: one slice, read-only, findings in your numbers.