Skip to content
SPECIFICATION

CIP.MD FIELD SPEC

The formal field specification for the cip.md rights declaration format. This is the citable, versioned specification document, distinct from the plain-language explainer.

VERSION 1.0CITABLE STANDARD
Documentcip.md Field Specification v1.0
StatusAdopted
RevisedMay 2026
LicenceAll Rights Reserved

Technical specification · cip.md format

cip.md Field Specification

Complete reference for all fields in the cip.md rights declaration format. The machine-readable rights file that sits alongside your content.

Reading time: 12 minAudience: Technical implementers

Deployment

Host at: yourdomain.com/cip.md

HTML reference: <link rel="cip-rights" href="/cip.md" type="text/plain" />

robots.txt: CIP: https://yourdomain.com/cip.md

§1Operator identity

The operator identity section establishes who is making the declaration, where it applies, and when it was issued. Every cip.md file must begin with this section.

FieldStatusDescription
CIP-Spec-VersionRequiredThe CIP specification version this declaration conforms to. Currently: v1.0
CIP-DomainRequiredThe domain this declaration applies to, without the protocol prefix (e.g. example.com)
CIP-Operator-IDRequiredStructured operator identifier. Format: op-{16-char-base32} in certified mode; op-PREVIEW-DRAFT in preview mode
CIP-Operator-NameRequiredFull legal name of the rights holder or operating entity
CIP-Rights-ContactRequiredEmail address for rights-related enquiries
CIP-Declaration-DateRequiredDate of this declaration (ISO 8601: YYYY-MM-DD)
CIP-Expiry-DateRecommendedDate on which this declaration should be re-verified (ISO 8601)
CIP-Asset-IdentifierRecommendedAsset identifier in scheme:value format. Schemes: isrc, iswc, isni, isbn, doi, uuid
CIP-Input-LicenceRecommendedOverall input licence class. Values: Owned, Licensed-Commercial, Licensed-Non-Commercial, Open-Permissive, Open-Conditional, Restricted, Prohibited
CIP-Consent-ExpiresOptionalExpiry date for time-limited consent (ISO 8601)

§2Certification

The certification section declares the operator's CIP certification status. In certified mode, these fields are populated from the Rights Registry. In preview mode, they contain placeholder values.

FieldStatusDescription
CIP-Cert-TrackRecommendedPrimary certification track. Values: Creator, Agency, Lawyer, Underwriter, Platform, None
CIP-Cert-LevelRecommendedCertification level within the track (varies by track)
CIP-Cert-BadgeRecommendedURL to verifiable badge on the Rights Registry
CIP-Cert-IssuedConditionalDate certification was issued (ISO 8601). Required if Cert-Track is not None
CIP-Cert-RenewalConditionalDate certification expires or renews (ISO 8601)
CIP-Cert-BodyOptionalCertifying body. Default: Creative Intellectual Property Charity Standards Committee

§3Rights bundle

The rights bundle declares which rights subsist in the content covered by this declaration. Each right uses the value vocabulary Subsisting or Not-Applicable.

FieldStatusDescription
CIP-Rights-ExpressionRequiredCopyright in the expression of the work
CIP-Rights-ReproductionRequiredRight to reproduce the work
CIP-Rights-DistributionRequiredRight to distribute copies of the work
CIP-Rights-PerformanceRequiredRight to perform or display the work publicly
CIP-Rights-DerivativeRequiredRight to create derivative works
CIP-Rights-MoralRequiredMoral rights (attribution, integrity)
CIP-Rights-DatabaseRequiredDatabase rights (EU/UK sui generis)
CIP-Rights-NILPRequiredName, Image, Likeness, and Persona rights
CIP-Rights-CollectiveOptionalCollectively managed rights (CMO)
CIP-Rights-BiometricOptionalBiometric data rights in recordings

§4Input permissions

Input permissions control how the declared content may be used by AI systems and other automated processes.

FieldStatusDescription
CIP-Training-IngestionRequiredWhether AI training ingestion is allowed. Values: Permitted, Restricted, Prohibited
CIP-Fine-TuningRequiredWhether use for model fine-tuning is allowed. Values: Permitted, Restricted, Prohibited
CIP-TDM-Opt-OutRequiredTDM opt-out declaration. Values: true, false
CIP-TDM-Opt-Out-ScopeConditionalScope of TDM opt-out. Values: All-Content, or a URL path pattern
CIP-Jurisdiction-ScopeRecommendedJurisdictions under which declarations apply. Comma-separated ISO 3166-1 codes

§5NILP declarations

The eight-field NILP specification from v3.6, covering Name, Image, Likeness, and Persona rights in AI contexts.

FieldStatusDescription
CIP-NILP-Voice-CloneRequiredVoice cloning permissions. Values: Prohibited, Permitted-Under-Licence
CIP-NILP-Likeness-AIRequiredAI-generated likeness permissions. Values: Prohibited, Permitted-Under-Licence
CIP-NILP-DeepfakeRequiredDeepfake generation permissions. Values: Prohibited, Permitted-Under-Licence
CIP-NILP-CommercialRequiredCommercial use of NILP-protected content. Values: Permitted-Under-Licence, Prohibited
CIP-NILP-PersonaRequiredPersona use permissions. Values: Prohibited, Permitted-Under-Licence
CIP-NILP-Consent-ExpiresOptionalNILP consent expiry date (ISO 8601)

§6Transformation matrix

Controls what kinds of transformation AI systems may perform on the declared content.

FieldStatusDescription
CIP-Transform-StyleRecommendedStyle transfer permissions. Values: Permitted, Restricted, Blocked
CIP-Transform-DerivativeRecommendedDerivative work generation. Values: Permitted, Restricted, Blocked

§7AI generation

The v3.24 AI Generation field set. Declares whether the content covered by this cip.md was itself AI-generated, and if so, provides the provenance chain. All fields in this section are conditional on CIP-AI-Generated: true.

FieldStatusDescription
CIP-AI-GeneratedRequiredBoolean. Whether the content was AI-generated. Values: true, false
CIP-AI-ModelConditionalAI model identifier in vendor:model-name:version format
CIP-AI-VendorConditionalLegal entity operating the model, with optional jurisdiction code
CIP-AI-UserConditionalThe user who initiated generation. Three forms: attributed:{name}, pseudonymous:{handle}+{verifier}, safeguarding-suppressed:{regime-id}
CIP-AI-PromptConditionalThe prompt used. Three forms: inline:"{text}", hash:{sha256}, withheld:{reason-code}
CIP-AI-Generation-TimestampOptionalWhen the generation occurred (ISO 8601)
CIP-AI-Composition-TypeConditionalValues: wholly-ai-generated, partly-ai-generated, ai-modified, ai-supervised-human-creation
CIP-AI-Training-Data-SourceConditionalThree forms: vendor-published:{url}, operator-fine-tune:{cdr-list}, not-disclosed-by-vendor
CIP-AI-Output-HashOptionalSHA-256 hash of the output. Format: sha256:{hex-digest}
CIP-AI-Generation-CostOptionalCost disclosure in {currency}:{amount}:{basis} format

§8Output provenance integration

The v3.17 Output-Provenance integration fields. These connect the cip.md declaration to an operator's Output-Provenance Block (OPB) endpoint for downstream verification.

FieldStatusDescription
CIP-Output-Provenance-EndpointOptionalURL of the operator's OPB verification endpoint
CIP-Output-Provenance-ClassConditionalOutput class. Values: A (text synthesis), B (multimedia generation), C (federated aggregation)
CIP-Output-Provenance-CompositionConditionalComposition rule. Values: most-restrictive, operator-policy, per-component
CIP-Mixed-Rights-BlockOptionalURL of the page carrying the Mixed-Rights Block for mixed-rights content

§9Provenance and CDR

Links the cip.md declaration to Core Data Records and the Rights Registry for verification.

FieldStatusDescription
CIP-Registry-URLRecommendedURL to the operator's Rights Registry verification page
CIP-Output-LicenceRecommendedOutput licence terms. Values: All-Rights-Reserved, CC-BY, CC-BY-SA, CC-BY-NC, CC-BY-ND, CC0, Custom
CIP-Attribution-RequiredRecommendedWhether attribution is required for use. Values: true, false
CIP-Attribution-FormatConditionalRequired attribution text or format string
CIP-Content-CredentialsOptionalC2PA Content Credentials integration. Values: true, false
CIP-Rights-Registry-ListedOptionalWhether the operator is listed in the CIP Rights Registry. Values: true, false

§10Field set — Third-party marks (v3.33)

This field declares third-party trademarks, brand identifiers, or registered marks present in the operator's content but owned by parties other than the operator. Use cases include product placements in film and television, branded backgrounds in user-generated content, in-game advertising, and client brand assets in agency-produced content.

CIP-Third-Party-Marks [mode: dual]

Format: {mark-name}:{rights-holder}:{permission-status} — multi-entry, comma-separated.

Mark name
Free-text identifier for the third-party mark (e.g. Coca-Cola, Nike, Apple).
Rights holder
Legal entity that owns the mark (e.g. The Coca-Cola Company, Apple Inc., Nike Inc.).
Permission status
Closed vocabulary declaring the basis on which the mark appears. Four values:
  • licensed — the operator holds a licence or formal permission from the rights holder to include the mark.
  • fair-use — the operator asserts fair use, nominative fair use, or comparative advertising grounds for inclusion.
  • incidental — the mark appears incidentally in the content (e.g. a branded item visible in a street scene).
  • unauthorised — the mark is present without permission or legal basis. Declaration does not cure the absence of rights.

Worked example

CIP-Third-Party-Marks: Coca-Cola:The Coca-Cola Company:licensed, Apple:Apple Inc.:incidental, Nike:Nike Inc.:fair-use

Verification caveat

Per-jurisdiction trademark and incidental-inclusion analysis varies materially. UK CDPA 1988 §31 provides an incidental inclusion exception; the US treats incidental use through First Amendment and nominative-fair-use analysis. The framework vocabulary is declaration shorthand, not a substantive legal determination.

Relationship to CIP-IP-Registration

CIP-IP-Registration (v3.29) declares marks the operator themselves owns. CIP-Third-Party-Marks declares marks owned by other parties. Both fields can appear in the same cip.md — they are complementary, not mutually exclusive.

§11Field set — Source material declaration (v3.34)

This field declares third-party copyrighted material (other than trademarks) present in the operator's content. Use cases include quotations and excerpts in journalism, audio samples in music production, film and television clips in documentaries, archival footage, stock photography, library music, performances, datasets, and code components.

CIP-Source-Material [mode: dual]

Format: {source-description}:{rights-holder}:{permission-status} — multi-entry, comma-separated.

Source description
Free-text identifier, specific enough to identify if challenged (e.g. Reuters-archive-clip-20230315, BFI-archive-WWII-footage-1944, Beatles-Strawberry-Fields-2s-clip).
Rights holder
Legal entity that owns the material. For complex rights splits, use semicolons to separate parties (e.g. Sony Music; Sony Music Publishing).
Permission status
Closed vocabulary declaring the basis on which the material appears. Seven values — extends the v3.33 vocabulary with three new statuses:
  • licensed — the operator holds a licence or formal permission from the rights holder.
  • fair-use — the operator asserts fair dealing (UK), fair use (US), or equivalent exception grounds.
  • incidental — the material appears incidentally in the content.
  • public-domain— the work is in the public domain in the operator's jurisdiction. UK: life + 70 years (CDPA 1988); US: per 17 U.S.C. §§302–305; Crown Copyright variations apply to government works.
  • creative-commons— the material is used under a Creative Commons licence variant. The operator's notes should carry the specific variant: CC0, CC-BY, CC-BY-SA, CC-BY-NC, CC-BY-ND, CC-BY-NC-SA, or CC-BY-NC-ND.
  • cleared-other — cleared through arrangements that do not fit the other categories. Examples: museum-loan terms, foundation-licensed material, festival-only documentary licences, research-use-only datasets.
  • unauthorised — the material is present without permission or legal basis. Declaration does not cure the absence of rights.

Worked example

CIP-Source-Material: BFI-archive-WWII-footage:British Film Institute:licensed, Churchill-1940-speech:Public Domain:public-domain, NYT-1985-excerpt:The New York Times Company:fair-use

Relationship to CIP-Third-Party-Marks

CIP-Third-Party-Marks (v3.33) handles trademarks and brand identifiers. CIP-Source-Material handles copyrighted material — quotations, samples, footage, datasets, code. Both fields can appear in the same cip.md and are complementary, not mutually exclusive.

For the full architectural framing of this field set, see the Source Material Declaration Architecture page.

§12Field set — Trade dress (v3.35)

This field declares trade dress engagement — the overall visual presentation of a product, packaging, or retail environment that identifies the source. It handles both operator-owned and third-party trade dress. The field is configuration-anchored rather than registration-anchored, because most US trade dress is unregistered Lanham Act §43(a) protection.

CIP-Trade-Dress [mode: dual]

Format: {trade-dress-description}:{rights-holder}:{permission-status} — multi-entry, comma-separated.

Trade-dress description
Free-text identifier describing the visual configuration (e.g. Coca-Cola-contour-bottle-silhouette, Tiffany-blue-box-packaging, Apple-Store-interior-glass-cube).
Rights holder
Legal entity that owns the trade dress.
Permission status
Uses the same 7-value closed vocabulary established in v3.34: licensed, fair-use, incidental, public-domain, creative-commons, cleared-other, unauthorised.

Worked example

CIP-Trade-Dress: Coca-Cola-contour-bottle:The Coca-Cola Company:licensed, Apple-Store-interior:Apple Inc.:incidental, Tiffany-blue-box:Tiffany & Co.:fair-use

Verification caveat

US trade-dress doctrine was established through Two Pesos v. Taco Cabana (1992), Wal-Mart v. Samara Brothers (2000), and TrafFix v. Marketing Displays (2001). The UK applies passing-off and registered designs law. The EU applies Community Designs Regulation 6/2002. Per-jurisdiction analysis is essential.

Three-field brand disambiguation

With v3.35, three complementary fields now cover the full brand-rights landscape in a cip.md declaration:

CIP-IP-Registration (v3.29)
Registration-anchored. Declares marks the operator themselves owns.
CIP-Third-Party-Marks (v3.33)
Mark-name-anchored. Declares third-party trademarks and brand identifiers.
CIP-Trade-Dress (v3.35)
Configuration-anchored. Declares registered and unregistered trade dress — visual configurations, packaging, and retail environments.

§13Versioning policy

The cip.md specification follows semantic versioning. The current specification is v1.0. The versioning policy commits to:

  • v1.x stability: No field removals or meaning changes within v1.x releases. New fields may be added. Existing fields remain backward-compatible.
  • v2.0 overlap: When v2.0 is eventually published, a 12-month overlap period will apply during which both v1.x and v2.0 parsers should be maintained.
  • Deprecation: Deprecated fields are marked in the specification and continue to be accepted by parsers for at least two minor versions.

§14Field-introduction history

VersionFields introduced
v3.2Initial cip.md spec: operator identity, rights bundle, input permissions, provenance
v3.3Certification block: CIP-Cert-Track, CIP-Cert-Level, CIP-Cert-Badge, CIP-Cert-Issued, CIP-Cert-Renewal
v3.4Mixed-Rights integration: CIP-Mixed-Rights-Block, CIP-Content-Rights-Map
v3.6NILP eight-field extension: Voice-Clone, Likeness-AI, Deepfake, Commercial, Persona, Consent-Expires
v3.17Output-Provenance integration: Endpoint, Class, Composition
v3.18Jurisdiction Scope formalisation: CIP-Jurisdiction-Scope three-form spec
v3.24AI Generation ten-field set: Generated, Model, Vendor, User, Prompt, Timestamp, Composition-Type, Training-Data-Source, Output-Hash, Generation-Cost
v3.26Generator-canonicalised extensions: 18 fields canonicalised; 4 deprecated (CIP-Transform-Synthesis, CIP-Prompt-Use, CIP-Training-Consent, CIP-NILP-Licence-Contact)
v3.28CIP-AI-Prompt withheld form: 6 reason codes (commercial-confidentiality, pending-litigation, trade-secret-protection, safeguarding-suppressed, third-party-confidentiality, regulatory-restriction)
v3.29Registered rights field set: CIP-Copyright-Registration, CIP-IP-Registration, CIP-CMO-Registration (Certified mode only)
v3.33Introduced CIP-Third-Party-Marks as a focused single-field release covering third-party trademarks, brand identifiers, or registered marks present in the operator's content but owned by parties other than the operator. Format {mark-name}:{rights-holder}:{permission-status} with closed-vocabulary permission-status (licensed / fair-use / incidental / unauthorised). Dual-mode field per v3.31 architecture. Distinct from CIP-IP-Registration (which declares operator-owned marks).
v3.34Introduced the Source Material Declaration Architecture as a cross-cutting skeleton anchor identifying nine category workstreams (quotations and excerpts; audio samples; film/TV clips; archival material; stock material; performances; dialogue and characters; datasets and structured material; software and code) and shipped the generalised CIP-Source-Material field as the starter increment. Extended the v3.33 four-value permission-status vocabulary with three additional values (public-domain, creative-commons, cleared-other), giving seven closed-vocabulary values total. Distinct from CIP-Third-Party-Marks which handles trademarks specifically; both fields can appear in the same cip.md.
v3.35Introduced CIP-Trade-Dress as a focused single-field release covering trade dress engagement (operator-owned or third-party present) — the overall visual presentation of products, packaging, or retail environments protected under US Lanham Act §43(a) (unregistered) and §2 (registered), UK passing-off doctrine and registered designs, EU Community Designs and Member State unfair-competition law. Format {trade-dress-description}:{rights-holder}:{permission-status} matching the v3.34 seven-value vocabulary. Distinct from CIP-IP-Registration (registration-anchored) and CIP-Third-Party-Marks (mark-name-anchored) because trade dress is configuration-anchored. All three fields can appear in the same cip.md.

Citation

CIP cip.md Field Specification v1.0, https://creativeip.org/reference/cip-md-spec