#1 Global Leader in Digital Trust & Quantum-Safe Security.    Discover how Keyfactor makes it possible.

Truepic Delivers Next-Generation Image Trust with Keyfactor PKI

Truepic modernized its image authenticity platform by replacing blockchain-based trust anchors with PKI using Keyfactor EJBCA and SignServer. The new architecture enables massive scalability, improved privacy, and cryptographic verification of photos and videos at global scale.

Millions
of certificates provisioned across cloud environments
100M+
of images authenticated using PKI-based trust

Truepic is a pioneer in image authenticity, helping organizations verify that digital photos and videos have not been manipulated. As adoption of image provenance technology accelerated, the company recognized that its first-generation blockchain-based architecture could benefit from PKI infrastructure to meet the demands of its new SDK products.

By adopting Keyfactor EJBCA and SignServer, Truepic reorganized its trust infrastructure around PKI. The new design enables on-device authentication, cryptographic signing, and secure provenance without centralized bottlenecks, giving Truepic the scalability, privacy, and reliability needed to support next-generation trust technology.

The Challenge

Truepic’s original blockchain-based trust model required centralized processing that impacted scalability and increased infrastructure complexity. As the company launched new SDKs and prepared for widespread adoption, the engineering team looked for a more flexible and efficient trust foundation.


The first generation trust infrastructure created a bottleneck that did not have the scalability or flexibility we needed.

Jason Slack Director of Engineering, Truepic
  • Scalability limitations

    Centralized blockchain notarization could not support the anticipated growth in image volume.

  • PKI expertise gap

    Designing and operating a high-scale PKI required specialized skills not readily available in-house.

  • Aggressive delivery timelines

    A new trust architecture had to be deployed quickly to support SDK customers and market expansion.

The Solution

PKI as the Foundation of Trust

Truepic selected Keyfactor EJBCA and SignServer to replace blockchain with a new PKI-based trust model. Truepic now uses EJBCA and SignServer in AWS environments to support certificate-based authentication and cryptographic sealing of image provenance data. EJBCA enabled Truepic to operate its own certificate authority in the cloud while securely authenticating devices and digitally signing images at scale. 

PKI is an absolute foundational piece to what we are building. Without EJBCA, we could not have what we have.It is a key pillar to the future of our products.

Jason Slack Director of Engineering, Truepic

Business Impact

With Keyfactor, Truepic delivered its next-generation Controlled Capture 2.0 platform, enabling image authenticity without centralized processing or blockchain dependencies. PKI-based authentication and digital signatures significantly reduced infrastructure complexity while improving privacy for end users. Automated certificate provisioning and signing workflows allow Truepic to scale globally with confidence.


  • Massive scalability and performance

    PKI enables authentication and signing at internet scale without bottlenecks.

  • Improved privacy and security

    Images are authenticated and sealed cryptographically without being uploaded to centralized systems.

  • Faster time to market and global readiness

    Professional services accelerated delivery and prepared the platform for international expansion and regulatory compliance.

We’ve built an industry-leading photo and video verification platform, with Keyfactor at its core. Now we’re ready to take it to the world.

Jason Slack Director of Engineering, Truepic

Customer Details

Industry
Technology
Location
San Diego, CA
# Employees
200+
Website
Products & Services Used
EJBCA, SignServer