CIP.MD FIELD SPEC
The formal field specification for the cip.md rights declaration format. This is the citable, versioned specification document, distinct from the plain-language explainer.
| Document | cip.md Field Specification v1.0 |
| Status | Adopted |
| Revised | May 2026 |
| Licence | All Rights Reserved |
Technical specification · cip.md format
cip.md Field Specification
Complete reference for all fields in the cip.md rights declaration format. The machine-readable rights file that sits alongside your content.
Deployment
Host at: yourdomain.com/cip.md
HTML reference: <link rel="cip-rights" href="/cip.md" type="text/plain" />
robots.txt: CIP: https://yourdomain.com/cip.md
§1Operator identity
The operator identity section establishes who is making the declaration, where it applies, and when it was issued. Every cip.md file must begin with this section.
| Field | Status | Description |
|---|---|---|
| CIP-Spec-Version | Required | The CIP specification version this declaration conforms to. Currently: v1.0 |
| CIP-Domain | Required | The domain this declaration applies to, without the protocol prefix (e.g. example.com) |
| CIP-Operator-ID | Required | Structured operator identifier. Format: op-{16-char-base32} in certified mode; op-PREVIEW-DRAFT in preview mode |
| CIP-Operator-Name | Required | Full legal name of the rights holder or operating entity |
| CIP-Rights-Contact | Required | Email address for rights-related enquiries |
| CIP-Declaration-Date | Required | Date of this declaration (ISO 8601: YYYY-MM-DD) |
| CIP-Expiry-Date | Recommended | Date on which this declaration should be re-verified (ISO 8601) |
| CIP-Asset-Identifier | Recommended | Asset identifier in scheme:value format. Schemes: isrc, iswc, isni, isbn, doi, uuid |
| CIP-Input-Licence | Recommended | Overall input licence class. Values: Owned, Licensed-Commercial, Licensed-Non-Commercial, Open-Permissive, Open-Conditional, Restricted, Prohibited |
| CIP-Consent-Expires | Optional | Expiry date for time-limited consent (ISO 8601) |
§2Certification
The certification section declares the operator's CIP certification status. In certified mode, these fields are populated from the Rights Registry. In preview mode, they contain placeholder values.
| Field | Status | Description |
|---|---|---|
| CIP-Cert-Track | Recommended | Primary certification track. Values: Creator, Agency, Lawyer, Underwriter, Platform, None |
| CIP-Cert-Level | Recommended | Certification level within the track (varies by track) |
| CIP-Cert-Badge | Recommended | URL to verifiable badge on the Rights Registry |
| CIP-Cert-Issued | Conditional | Date certification was issued (ISO 8601). Required if Cert-Track is not None |
| CIP-Cert-Renewal | Conditional | Date certification expires or renews (ISO 8601) |
| CIP-Cert-Body | Optional | Certifying body. Default: Creative Intellectual Property Charity Standards Committee |
§3Rights bundle
The rights bundle declares which rights subsist in the content covered by this declaration. Each right uses the value vocabulary Subsisting or Not-Applicable.
| Field | Status | Description |
|---|---|---|
| CIP-Rights-Expression | Required | Copyright in the expression of the work |
| CIP-Rights-Reproduction | Required | Right to reproduce the work |
| CIP-Rights-Distribution | Required | Right to distribute copies of the work |
| CIP-Rights-Performance | Required | Right to perform or display the work publicly |
| CIP-Rights-Derivative | Required | Right to create derivative works |
| CIP-Rights-Moral | Required | Moral rights (attribution, integrity) |
| CIP-Rights-Database | Required | Database rights (EU/UK sui generis) |
| CIP-Rights-NILP | Required | Name, Image, Likeness, and Persona rights |
| CIP-Rights-Collective | Optional | Collectively managed rights (CMO) |
| CIP-Rights-Biometric | Optional | Biometric data rights in recordings |
§4Input permissions
Input permissions control how the declared content may be used by AI systems and other automated processes.
| Field | Status | Description |
|---|---|---|
| CIP-Training-Ingestion | Required | Whether AI training ingestion is allowed. Values: Permitted, Restricted, Prohibited |
| CIP-Fine-Tuning | Required | Whether use for model fine-tuning is allowed. Values: Permitted, Restricted, Prohibited |
| CIP-TDM-Opt-Out | Required | TDM opt-out declaration. Values: true, false |
| CIP-TDM-Opt-Out-Scope | Conditional | Scope of TDM opt-out. Values: All-Content, or a URL path pattern |
| CIP-Jurisdiction-Scope | Recommended | Jurisdictions under which declarations apply. Comma-separated ISO 3166-1 codes |
§5NILP declarations
The eight-field NILP specification from v3.6, covering Name, Image, Likeness, and Persona rights in AI contexts.
| Field | Status | Description |
|---|---|---|
| CIP-NILP-Voice-Clone | Required | Voice cloning permissions. Values: Prohibited, Permitted-Under-Licence |
| CIP-NILP-Likeness-AI | Required | AI-generated likeness permissions. Values: Prohibited, Permitted-Under-Licence |
| CIP-NILP-Deepfake | Required | Deepfake generation permissions. Values: Prohibited, Permitted-Under-Licence |
| CIP-NILP-Commercial | Required | Commercial use of NILP-protected content. Values: Permitted-Under-Licence, Prohibited |
| CIP-NILP-Persona | Required | Persona use permissions. Values: Prohibited, Permitted-Under-Licence |
| CIP-NILP-Consent-Expires | Optional | NILP consent expiry date (ISO 8601) |
§6Transformation matrix
Controls what kinds of transformation AI systems may perform on the declared content.
| Field | Status | Description |
|---|---|---|
| CIP-Transform-Style | Recommended | Style transfer permissions. Values: Permitted, Restricted, Blocked |
| CIP-Transform-Derivative | Recommended | Derivative work generation. Values: Permitted, Restricted, Blocked |
§7AI generation
The v3.24 AI Generation field set. Declares whether the content covered by this cip.md was itself AI-generated, and if so, provides the provenance chain. All fields in this section are conditional on CIP-AI-Generated: true.
| Field | Status | Description |
|---|---|---|
| CIP-AI-Generated | Required | Boolean. Whether the content was AI-generated. Values: true, false |
| CIP-AI-Model | Conditional | AI model identifier in vendor:model-name:version format |
| CIP-AI-Vendor | Conditional | Legal entity operating the model, with optional jurisdiction code |
| CIP-AI-User | Conditional | The user who initiated generation. Three forms: attributed:{name}, pseudonymous:{handle}+{verifier}, safeguarding-suppressed:{regime-id} |
| CIP-AI-Prompt | Conditional | The prompt used. Three forms: inline:"{text}", hash:{sha256}, withheld:{reason-code} |
| CIP-AI-Generation-Timestamp | Optional | When the generation occurred (ISO 8601) |
| CIP-AI-Composition-Type | Conditional | Values: wholly-ai-generated, partly-ai-generated, ai-modified, ai-supervised-human-creation |
| CIP-AI-Training-Data-Source | Conditional | Three forms: vendor-published:{url}, operator-fine-tune:{cdr-list}, not-disclosed-by-vendor |
| CIP-AI-Output-Hash | Optional | SHA-256 hash of the output. Format: sha256:{hex-digest} |
| CIP-AI-Generation-Cost | Optional | Cost disclosure in {currency}:{amount}:{basis} format |
§8Output provenance integration
The v3.17 Output-Provenance integration fields. These connect the cip.md declaration to an operator's Output-Provenance Block (OPB) endpoint for downstream verification.
| Field | Status | Description |
|---|---|---|
| CIP-Output-Provenance-Endpoint | Optional | URL of the operator's OPB verification endpoint |
| CIP-Output-Provenance-Class | Conditional | Output class. Values: A (text synthesis), B (multimedia generation), C (federated aggregation) |
| CIP-Output-Provenance-Composition | Conditional | Composition rule. Values: most-restrictive, operator-policy, per-component |
| CIP-Mixed-Rights-Block | Optional | URL of the page carrying the Mixed-Rights Block for mixed-rights content |
§9Provenance and CDR
Links the cip.md declaration to Core Data Records and the Rights Registry for verification.
| Field | Status | Description |
|---|---|---|
| CIP-Registry-URL | Recommended | URL to the operator's Rights Registry verification page |
| CIP-Output-Licence | Recommended | Output licence terms. Values: All-Rights-Reserved, CC-BY, CC-BY-SA, CC-BY-NC, CC-BY-ND, CC0, Custom |
| CIP-Attribution-Required | Recommended | Whether attribution is required for use. Values: true, false |
| CIP-Attribution-Format | Conditional | Required attribution text or format string |
| CIP-Content-Credentials | Optional | C2PA Content Credentials integration. Values: true, false |
| CIP-Rights-Registry-Listed | Optional | Whether the operator is listed in the CIP Rights Registry. Values: true, false |
§10Field set — Third-party marks (v3.33)
This field declares third-party trademarks, brand identifiers, or registered marks present in the operator's content but owned by parties other than the operator. Use cases include product placements in film and television, branded backgrounds in user-generated content, in-game advertising, and client brand assets in agency-produced content.
CIP-Third-Party-Marks [mode: dual]
Format: {mark-name}:{rights-holder}:{permission-status} — multi-entry, comma-separated.
- Mark name
- Free-text identifier for the third-party mark (e.g. Coca-Cola, Nike, Apple).
- Rights holder
- Legal entity that owns the mark (e.g. The Coca-Cola Company, Apple Inc., Nike Inc.).
- Permission status
- Closed vocabulary declaring the basis on which the mark appears. Four values:
- licensed — the operator holds a licence or formal permission from the rights holder to include the mark.
- fair-use — the operator asserts fair use, nominative fair use, or comparative advertising grounds for inclusion.
- incidental — the mark appears incidentally in the content (e.g. a branded item visible in a street scene).
- unauthorised — the mark is present without permission or legal basis. Declaration does not cure the absence of rights.
Worked example
Verification caveat
Per-jurisdiction trademark and incidental-inclusion analysis varies materially. UK CDPA 1988 §31 provides an incidental inclusion exception; the US treats incidental use through First Amendment and nominative-fair-use analysis. The framework vocabulary is declaration shorthand, not a substantive legal determination.
Relationship to CIP-IP-Registration
CIP-IP-Registration (v3.29) declares marks the operator themselves owns. CIP-Third-Party-Marks declares marks owned by other parties. Both fields can appear in the same cip.md — they are complementary, not mutually exclusive.
§11Field set — Source material declaration (v3.34)
This field declares third-party copyrighted material (other than trademarks) present in the operator's content. Use cases include quotations and excerpts in journalism, audio samples in music production, film and television clips in documentaries, archival footage, stock photography, library music, performances, datasets, and code components.
CIP-Source-Material [mode: dual]
Format: {source-description}:{rights-holder}:{permission-status} — multi-entry, comma-separated.
- Source description
- Free-text identifier, specific enough to identify if challenged (e.g. Reuters-archive-clip-20230315, BFI-archive-WWII-footage-1944, Beatles-Strawberry-Fields-2s-clip).
- Rights holder
- Legal entity that owns the material. For complex rights splits, use semicolons to separate parties (e.g. Sony Music; Sony Music Publishing).
- Permission status
- Closed vocabulary declaring the basis on which the material appears. Seven values — extends the v3.33 vocabulary with three new statuses:
- licensed — the operator holds a licence or formal permission from the rights holder.
- fair-use — the operator asserts fair dealing (UK), fair use (US), or equivalent exception grounds.
- incidental — the material appears incidentally in the content.
- public-domain— the work is in the public domain in the operator's jurisdiction. UK: life + 70 years (CDPA 1988); US: per 17 U.S.C. §§302–305; Crown Copyright variations apply to government works.
- creative-commons— the material is used under a Creative Commons licence variant. The operator's notes should carry the specific variant: CC0, CC-BY, CC-BY-SA, CC-BY-NC, CC-BY-ND, CC-BY-NC-SA, or CC-BY-NC-ND.
- cleared-other — cleared through arrangements that do not fit the other categories. Examples: museum-loan terms, foundation-licensed material, festival-only documentary licences, research-use-only datasets.
- unauthorised — the material is present without permission or legal basis. Declaration does not cure the absence of rights.
Worked example
Relationship to CIP-Third-Party-Marks
CIP-Third-Party-Marks (v3.33) handles trademarks and brand identifiers. CIP-Source-Material handles copyrighted material — quotations, samples, footage, datasets, code. Both fields can appear in the same cip.md and are complementary, not mutually exclusive.
For the full architectural framing of this field set, see the Source Material Declaration Architecture page.
§12Field set — Trade dress (v3.35)
This field declares trade dress engagement — the overall visual presentation of a product, packaging, or retail environment that identifies the source. It handles both operator-owned and third-party trade dress. The field is configuration-anchored rather than registration-anchored, because most US trade dress is unregistered Lanham Act §43(a) protection.
CIP-Trade-Dress [mode: dual]
Format: {trade-dress-description}:{rights-holder}:{permission-status} — multi-entry, comma-separated.
- Trade-dress description
- Free-text identifier describing the visual configuration (e.g. Coca-Cola-contour-bottle-silhouette, Tiffany-blue-box-packaging, Apple-Store-interior-glass-cube).
- Rights holder
- Legal entity that owns the trade dress.
- Permission status
- Uses the same 7-value closed vocabulary established in v3.34: licensed, fair-use, incidental, public-domain, creative-commons, cleared-other, unauthorised.
Worked example
Verification caveat
US trade-dress doctrine was established through Two Pesos v. Taco Cabana (1992), Wal-Mart v. Samara Brothers (2000), and TrafFix v. Marketing Displays (2001). The UK applies passing-off and registered designs law. The EU applies Community Designs Regulation 6/2002. Per-jurisdiction analysis is essential.
Three-field brand disambiguation
With v3.35, three complementary fields now cover the full brand-rights landscape in a cip.md declaration:
- CIP-IP-Registration (v3.29)
- Registration-anchored. Declares marks the operator themselves owns.
- CIP-Third-Party-Marks (v3.33)
- Mark-name-anchored. Declares third-party trademarks and brand identifiers.
- CIP-Trade-Dress (v3.35)
- Configuration-anchored. Declares registered and unregistered trade dress — visual configurations, packaging, and retail environments.
§13Versioning policy
The cip.md specification follows semantic versioning. The current specification is v1.0. The versioning policy commits to:
- v1.x stability: No field removals or meaning changes within v1.x releases. New fields may be added. Existing fields remain backward-compatible.
- v2.0 overlap: When v2.0 is eventually published, a 12-month overlap period will apply during which both v1.x and v2.0 parsers should be maintained.
- Deprecation: Deprecated fields are marked in the specification and continue to be accepted by parsers for at least two minor versions.
§14Field-introduction history
| Version | Fields introduced |
|---|---|
| v3.2 | Initial cip.md spec: operator identity, rights bundle, input permissions, provenance |
| v3.3 | Certification block: CIP-Cert-Track, CIP-Cert-Level, CIP-Cert-Badge, CIP-Cert-Issued, CIP-Cert-Renewal |
| v3.4 | Mixed-Rights integration: CIP-Mixed-Rights-Block, CIP-Content-Rights-Map |
| v3.6 | NILP eight-field extension: Voice-Clone, Likeness-AI, Deepfake, Commercial, Persona, Consent-Expires |
| v3.17 | Output-Provenance integration: Endpoint, Class, Composition |
| v3.18 | Jurisdiction Scope formalisation: CIP-Jurisdiction-Scope three-form spec |
| v3.24 | AI Generation ten-field set: Generated, Model, Vendor, User, Prompt, Timestamp, Composition-Type, Training-Data-Source, Output-Hash, Generation-Cost |
| v3.26 | Generator-canonicalised extensions: 18 fields canonicalised; 4 deprecated (CIP-Transform-Synthesis, CIP-Prompt-Use, CIP-Training-Consent, CIP-NILP-Licence-Contact) |
| v3.28 | CIP-AI-Prompt withheld form: 6 reason codes (commercial-confidentiality, pending-litigation, trade-secret-protection, safeguarding-suppressed, third-party-confidentiality, regulatory-restriction) |
| v3.29 | Registered rights field set: CIP-Copyright-Registration, CIP-IP-Registration, CIP-CMO-Registration (Certified mode only) |
| v3.33 | Introduced CIP-Third-Party-Marks as a focused single-field release covering third-party trademarks, brand identifiers, or registered marks present in the operator's content but owned by parties other than the operator. Format {mark-name}:{rights-holder}:{permission-status} with closed-vocabulary permission-status (licensed / fair-use / incidental / unauthorised). Dual-mode field per v3.31 architecture. Distinct from CIP-IP-Registration (which declares operator-owned marks). |
| v3.34 | Introduced the Source Material Declaration Architecture as a cross-cutting skeleton anchor identifying nine category workstreams (quotations and excerpts; audio samples; film/TV clips; archival material; stock material; performances; dialogue and characters; datasets and structured material; software and code) and shipped the generalised CIP-Source-Material field as the starter increment. Extended the v3.33 four-value permission-status vocabulary with three additional values (public-domain, creative-commons, cleared-other), giving seven closed-vocabulary values total. Distinct from CIP-Third-Party-Marks which handles trademarks specifically; both fields can appear in the same cip.md. |
| v3.35 | Introduced CIP-Trade-Dress as a focused single-field release covering trade dress engagement (operator-owned or third-party present) — the overall visual presentation of products, packaging, or retail environments protected under US Lanham Act §43(a) (unregistered) and §2 (registered), UK passing-off doctrine and registered designs, EU Community Designs and Member State unfair-competition law. Format {trade-dress-description}:{rights-holder}:{permission-status} matching the v3.34 seven-value vocabulary. Distinct from CIP-IP-Registration (registration-anchored) and CIP-Third-Party-Marks (mark-name-anchored) because trade dress is configuration-anchored. All three fields can appear in the same cip.md. |
Citation
CIP cip.md Field Specification v1.0, https://creativeip.org/reference/cip-md-spec
Related documents