Truepic Vision / LensTruepic Vision / Lens
核验标记表示资料完整度,不是产品评分。下列未确认项可能影响选型;请按对应来源逐项确认。The confidence mark describes evidence completeness, not a product score. Unconfirmed items below may affect your choice; check them against the relevant sources.
未确认的信息Information not confirmed
- 验真与 AI 分析背后的模型是否披露、能否替换
- 媒体与派生数据的完整存储位置与分包方清单
- 合规认证明细(官方 trust 页本次直抓只返回动态脚本壳,无在册内容)
- 检查任务的队列时长、重试与续跑细节
- API 的具体配额与并发上限(除每 10 秒 20 次在册值外)
- 是否支持中国大陆接入
- Whether the models behind authentication and AI analysis are disclosed or replaceable
- Full storage locations and the sub-processor list for media and derived data
- Certification detail (the official trust page returned only a dynamic script shell)
- Inspection queue duration, retries and resumption details
- API quotas and concurrency beyond the recorded 20 requests per 10 seconds
- Whether mainland-China access is supported
它验的是「这张照片是不是当场拍的」,不是「这段话能不能发」。
官方文档把主轴写成拍摄即验真:PKI 签名证书加 C2PA content credentials, 再叠一组现场一致性检查(时间、位置、屏幕翻拍、清晰度)。
它验的是「这张照片是不是当场拍的」,不是「这段话能不能发」。
官方文档把主轴写成拍摄即验真:PKI 签名证书加 C2PA content credentials, 再叠一组现场一致性检查(时间、位置、屏幕翻拍、清晰度)。
适合与不适合When to use it, when not to
适合保险理赔、贷款抵押、设备勘验这类要证据链的流程,以及要把验真结论用 API 接进自有系统的团队。 不适合两类人:要找 LLM 输入输出过滤的(那是护栏那条线),要自助注册先试起来的 ——官方 getting-started 页明写不提供自助开通,走演示与合同。
中文生态China availability 国产 / 国内可直接用 / 备案状态 · 快照domestic / direct access / CAC filing · snapshot 2026-11-06
- 出品属地Origin
- 国外出品foreign-made Truepic Inc.(隐私政策当日在册主体);官方 regions 页只列 US 与 UK。Truepic Inc. (entity on record in the privacy policy same day); the official regions page lists only US and UK.
- 国内使用Direct access
- 直连未核验direct unknown 同日实测 www.truepic.com 与 vision.truepic.dev 返回 200,但这只是站点与文档可达;服务侧无自助开通、区域未含大陆,故不判「可用」。verify.truepic.com 本次实测返回 000(无法建连)。Same-day probes returned 200 for www.truepic.com and vision.truepic.dev, but that is site/documentation reachability only; there is no self-serve provisioning and no mainland region, so availability is not asserted. verify.truepic.com returned 000.
- 备案状态CAC filing
- 备案未核验filing unknown:官方站点与文档均未写中国大陆备案/登记信息;本次未检索监管公示名单,不做推断。Neither the site nor the docs mention mainland filing/registration; the public registry was not searched.
备案信息以网信办《生成式人工智能服务已备案信息》公示名单为准(按批次滚动更新,本站只抄编号不解读);「大陆可直连」是本站从大陆网络直连实测的结果,不是厂商承诺。GitHub 类站点当日实测有波动,口径写在依据里。Filing status is quoted from the CAC public registry (updated batch by batch; this site copies the number and does not interpret it). "Direct access" is this site's own reachability measurement from a mainland network, not a vendor promise. GitHub-hosted sites fluctuated on the measurement day — the note says so.
固定坐标系Fixed coordinate system
8 个维度dimensions, 与同分区其他对象逐项可比each comparable item by item against others in the same section.
- 模型与开放条件Model & openness
不开放选模型:在册的检测面是 Truepic 自己的验真与检查流水线。verification-tests 页在册项目为 模糊度、时间准确性、位置、屏幕翻拍检测与可选 AI 任务;Lens 侧走 PKI 签名证书与 C2PA content credentials 判来源(lens-api 页在册)。验真用的具体模型是否披露、能否替换,官方页未逐条说明,记为未知。
No model picking: the recorded detection surface is Truepic's own authentication and inspection pipeline. The verification-tests page lists blur, time accuracy, location, screen-recapture detection and optional AI tasks; the Lens side judges provenance through PKI-signed certificates and C2PA content credentials (Lens API page on record). Whether the underlying models are disclosed or replaceable is not stated item by item and is recorded as unknown.
- 运行位置Where it runs
托管云交付:Vision 网页平台(登录入口与 Okta SSO 在文档在册)加 REST API。 regions 页在册只有 US 与 UK 两个区域,并写明数据存在发起请求的那个区域。未见本机或离线形态的官方声明。
Delivered as a hosted cloud: the Vision web platform (login entry and Okta SSO are in the docs) plus a REST API. The regions page records only US and UK, and states data is stored in the region where the API request is made. No official statement of a local or offline deployment form was found.
- 本地文件Local files
你上传图像/视频与检查单,结果以 JSON 报告返回,检查单可导出 PDF(导出页在文档导航在册)。 Lens Web SDK 在浏览器侧完成采集。官方页未声明读写你的本地文件系统,也未声明媒体最终落在哪家存储。
You upload images, video and inspection records; results come back as a JSON report, and inspections can be exported as PDFs (that page sits in the documentation navigation). Lens Web SDK captures on the browser side. Nothing is recorded about reading your local filesystem, nor where media ultimately lands in storage.
- 关机后的任务Tasks after shutdown
检查按任务态推进:Inspection Statuses、Alerts、Webhooks 等页面在官方文档导航在册, 说明是「提交后异步出结论 + 回调通知」的形态。任务队列时长与续跑细节本次未逐页核验,记为未知。
Inspections move through task states: the Inspection Statuses, Alerts and Webhooks pages sit in the official documentation navigation, which is the shape of 'submit, get a conclusion asynchronously, receive callbacks'. Queue duration and retry details were not verified page by page and are recorded as unknown.
- 工具与扩展Tools & extensions
扩展面是 API 而非插件:OAuth 2.0 鉴权、Lens API 与 Lens Web SDK(各有独立 changelog)、 webhook 与 webhook actions、网站表单、嵌入原生应用的 webview(以上页面均在文档导航在册)。 MCP 或其他第三方工具协议未见官方声明,记为未知。
The extension surface is the API, not plugins: OAuth 2.0 authentication, the Lens API and Lens Web SDK (each with its own changelog), webhooks and webhook actions, website forms, and a webview embedded into native apps - all listed in the documentation navigation. No MCP or other tool-protocol statement was found; recorded as unknown.
- 上下文与记忆Context & memory
以单条 inspection 为组织单位:Teams、Custom Fields、Lists、Message Template Sets 在册, Risk Network 提供跨客户的历史线索。这不是会话式上下文,跨请求的「记忆」机制官方未说明,记为未知。
The unit of organisation is a single inspection: Teams, Custom Fields, Lists and Message Template Sets are on record, and the Risk Network adds cross-customer history. This is not conversational context, and no cross-request memory mechanism is described; recorded as unknown.
- 权限与限制Permissions & limits
官方 getting-started 页在册「Vision 不提供自助注册」,走演示与合同。API 限流在册:每 10 秒最多 20 次请求。 隐私政策(生效 2026-01-23)在册:采集标识符、内容与设备数据;以匿名化数据训练模型; 与分包方在全球范围共享;保留期按合同,账号终止后 90 天。合规认证明细未核验到—— 官方 trust 页本次直抓只返回动态脚本壳,无在册内容,记为未知。
The getting-started page records 'Vision does not provide self-serve signup'; access runs through demos and contracts. The API overview page records a limit of up to 20 requests per 10-second period. The privacy policy (effective 2026-01-23) records collection of identifiers, content and device data; model training on anonymised data; global sharing with sub-processors; retention per contract and 90 days after termination. Certification detail was not verified - the official trust page returned only a dynamic script shell - so it is recorded as unknown.
- 适合什么任务Best for
适合保险理赔、贷款与抵押、设备勘验这类要「拍摄即验真、事后可举证」的流程,以及要把验真结论接进自有系统的 API 用户。 不适合要 LLM 输入输出过滤的团队(不是它的产品主轴),也不适合要自托管或要免费自助额度的人。
Fits: insurance claims, lending and collateral, equipment inspection - any workflow needing authenticated-at-capture evidence plus a defensible record - and teams wiring authentication verdicts into their own systems through the API. Not a fit: teams looking for LLM input/output filtering (not the product's main axis), anyone needing self-hosting, or anyone expecting a free self-serve quota (the pricing page records no free plan).
头号误解Top misconception
- 把 Truepic 当通用内容审核 API:官方在册主轴是拍摄验真与检查流水,不是 prompt 与输出过滤
- 以为有 C2PA 凭证就等于内容真实:凭证给的是来源与编辑史,不等于内容没有误导
- 以为能自助开通:官方 getting-started 页在册「不提供 self-serve signup」
证据来源Evidence sources
最近核验记录Latest recorded check 2026-11-06,内容更新日content updated on 2026-11-06。单项复核范围见正文或来源说明,不代表所有字段在同一天重新核验。See the text or source notes for item-specific scope; this does not mean every field was rechecked on that date.
| 类型Type | 名称Name | 链接Link |
|---|---|---|
| docs | Truepic · 官网(产品定位为拍摄即验真与检查平台,导航与文档入口在册,2026-11-06 直抓 200)Truepic · official site (capture-time authentication and inspection platform positioning; navigation and docs entry, direct-fetched 200 on 2026-11-06) | https://www.truepic.com/ |
| docs | Truepic Vision · Getting started(无自助注册;content credentials 表述,2026-11-06 直抓 200)Truepic Vision · Getting started (no self-serve signup; content-credentials wording, direct-fetched 200 on 2026-11-06) | https://vision.truepic.dev/docs/getting-started.md |
| docs | Truepic Vision · API overview(OAuth 2.0 鉴权与每 10 秒 20 次限流,2026-11-06 直抓 200)Truepic Vision · API overview (OAuth 2.0 and the 20-requests-per-10-seconds limit, direct-fetched 200 on 2026-11-06) | https://vision.truepic.dev/docs/api-overview.md |
| docs | Truepic Vision · Regions(仅 US / UK;数据存在发起请求的区域,2026-11-06 直抓 200)Truepic Vision · Regions (US and UK only; data stored in the request region, direct-fetched 200 on 2026-11-06) | https://vision.truepic.dev/docs/regions.md |
| docs | Truepic Lens API(PKI 签名证书与 C2PA 凭证校验、JSON 验真报告,2026-11-06 直抓 200)Truepic Lens API (PKI-signed certificates with C2PA credentials; JSON authentication report, direct-fetched 200 on 2026-11-06) | https://vision.truepic.dev/docs/lens-api.md |
| docs | Truepic Vision · Verification tests(模糊度/时间/位置/屏幕翻拍与可选 AI 任务,2026-11-06 直抓 200)Truepic Vision · Verification tests (blur / time / location / screen detection plus optional AI tasks, direct-fetched 200 on 2026-11-06) | https://vision.truepic.dev/docs/verification-tests.md |
| changelog | Truepic Lens API · Changelog(2024-09-26 C2PA 1.4/2.0 等条目,2026-11-06 直抓 200)Truepic Lens API · Changelog (C2PA 1.4/2.0 entry dated 2024-09-26, direct-fetched 200 on 2026-11-06) | https://vision.truepic.dev/docs/lens-api-changelog.md |
| changelog | Truepic Lens Web SDK · Changelog(最新在册条目 2025-01-22,2026-11-06 直抓 200)Truepic Lens Web SDK · Changelog (latest recorded entry 2025-01-22, direct-fetched 200 on 2026-11-06) | https://vision.truepic.dev/docs/lens-web-sdk-changelog.md |
| docs | Truepic · Privacy Policy(主体 Truepic Inc.、训练用途、分包方与保留期,2026-11-06 直抓 200)Truepic · Privacy Policy (Truepic Inc., anonymised model training, sub-processors, retention, direct-fetched 200 on 2026-11-06) | https://www.truepic.com/privacy-policy |
| pricing | Truepic · Pricing(Flex 月付 / Standard 年付结构,无免费自助档;本档不采价格数字,2026-11-06 直抓 200)Truepic · Pricing (Flex month-to-month and Standard annual structure, no free self-serve tier; no price numbers here, direct-fetched 200 on 2026-11-06) | https://www.truepic.com/pricing |
| engineering | Truepic · Blog(2026-08 AI Analysis 等产品在册条目,2026-11-06 直抓 200)Truepic · Blog (2026 product items on record such as AI Analysis, direct-fetched 200 on 2026-11-06) | https://www.truepic.com/blog |
| spec | C2PA · 官网(规范主体与指导委员会成员在册含 Truepic,2026-11-06 直抓 200)C2PA · official site (standards body and steering-committee membership including Truepic, direct-fetched 200 on 2026-11-06) | https://c2pa.org/ |
官方口径与未核到项Official record and unverified items
本站尚未完成实测。本档不含验真准确率、误判率或延迟数字。
实测建议(三条):
- 同一张翻拍图在不同检查项下的结论是否互相矛盾
- US 与 UK 区域的延迟差异与数据驻留实际效果
- C2PA 凭证缺失与被改坏这两种状态在报告里如何区分
This site has not completed measured runs; nothing here covers authentication accuracy, false-positive rates or latency.
Suggested measurements (three):
- Whether the individual verification tests ever contradict each other on the same re-photographed image
- Latency differences between the US and UK regions, and whether residency behaves as documented
- How the report distinguishes 'credential missing' from 'credential damaged'
能力边界Capability boundaries
在册能判的:媒体是否为签名设备当场采集、是否翻拍屏幕、时间与位置是否自洽、 元数据是否被改动,以及可选的 AI 分析任务。不在册的:它不判内容是否有害, 也不替你决定要不要采信这张图。C2PA 侧的边界是本站观点:凭证给的是来源与处理史, 不是「真实」的终极判定(详见 Content Credentials)。
On record it can judge: whether media was captured live on a signing device, whether a screen was re-photographed, whether time and location are self-consistent, whether metadata was altered, plus optional AI analysis tasks. Not on record: it does not decide whether content is harmful, and it does not decide whether you should trust the picture. The C2PA boundary, in this site's view: credentials give provenance and processing history, not a final verdict on truthfulness (see the Content Credentials entry).
变更记录说明Change record
公开版本记录只有两条 SDK 线:Lens API changelog 最新在册条目为 2024-09-26 (加 C2PA 1.4 / 2.0、hash box、GPSHPositioningError 与元数据断言), Lens Web SDK changelog 最新为 2025-01-22。Vision 平台本体无公开 changelog。 官网 blog 与 newsroom 有 2026 年的产品与集成在册条目(如 2026-08 AI Analysis), 但没有可核验的版本号,故 lifecycle 记 maintenance 而非 active。
Only two SDK lines have public version records: the Lens API changelog's newest entry dated 2024-09-26 (C2PA 1.4 / 2.0, hash boxes, GPSHPositioningError, metadata assertions) and the Lens Web SDK changelog's newest dated 2025-01-22. The Vision platform itself has no public changelog. The blog and newsroom carry dated 2026 product and integration items (AI Analysis in 2026-08, a Verisk workflow in 2026-09) but without verifiable version numbers, so lifecycle is recorded as maintenance rather than active.
相关条目Related entries
- Content CredentialsContent Credentials同一套凭证标准的验证侧生态;这里是采集与业务流,那里是通用验证器。Same line: Content Credentials(内容凭证) (in provenance and labelling); this entry states only what its own official sources support.
- Azure AI Content SafetyAzure AI Content Safety一条管「内容该不该拦」,一条管「内容能不能举证」。Same line: Azure AI Content Safety (in provenance and labelling); this entry states only what its own official sources support.
- LiteLLMLiteLLM Proxy (AI Gateway)网关侧留的是调用与预算记录,这里留的是媒体与拍摄现场记录。Same line: Amazon Bedrock Guardrails (in provenance and labelling); this entry states only what its own official sources support.
- Amazon Bedrock GuardrailsAmazon Bedrock Guardrails同分区对照Same layer
本页由This page is generated from the ai-handbook 数据层生成(CC BY 4.0)。data layer (CC BY 4.0).
方法论与坐标系定义见仓库内For the methodology and coordinate definitions, see METHODOLOGY.md.