Truepic Vision

Texts or emails a person at the place a capture link; photos are checked for time, GPS spoofing and device integrity.

API by agreement, key required, irlpls adapter · docs

Mode
Made to order · hours
Coverage
US, Europe
Price
$5 / inspection
Key
Required
Resale
Not stated
AI training
Not stated

Eight links

3 of 8 links claimed · 0 evidenced

Compiled from public sources, unclaimed. What they mean

Each link
  1. 1. Real personNot stated

    Person · Not stated

    Still open: Whoever opens the link does the capture. The buyer supplies their name and phone or email, and Truepic does not document any identity check on them.

  2. 2. Captured locallyClaimed

    Camera · Claimed. Lens signs each capture with content credentials (C2PA manifest): on-device with a device key in the native Vision apps, server-side in the web app, Lens Web SDK and Embedded Vision. capture_integrity_result checks the signed details ('Securely signed; tamper-proof').

    Still open: Truepic is not on the C2PA Conforming Products List and its CA is not on the C2PA Trust List (checked 2026-10-28), so a validator will not report the manifest as Trusted. Web captures are signed on Truepic's server, not on the device. No revocation policy for signing keys is documented. Signing does not detect a re-photographed screen; pop_result (under content) is a model's verdict.

    Place · Claimed. geolocation_result (GPS spoofing check); distance_from_customer_address_exceeds_threshold; optional geofencing; Risk Network falsified_location insight

    Still open: Location comes from the phone and can still be spoofed. Truepic's spoof detection is its own, and the web app has no sensor data.

  3. 3. Genuine deviceClaimed

    App · Claimed. Truepic Lens capture in the Vision app or web app. capture_integrity_result checks the signed details, data_result checks the upload. jailbreak_result and device attestation (AppAttest/SafetyNet) run in the native apps only.

    Still open: These are Truepic's own results. Its signing certificates chain to Truepic's own CA, which is not on the C2PA Trust List, and Truepic is not on the C2PA Conforming Products List. The web app signs on the server and has no root detection or attestation. SafetyNet is deprecated by Google in favour of Play Integrity.

  4. 4. Sealed captureClaimed

    Camera · Claimed. Lens signs each capture with content credentials (C2PA manifest): on-device with a device key in the native Vision apps, server-side in the web app, Lens Web SDK and Embedded Vision. capture_integrity_result checks the signed details ('Securely signed; tamper-proof').

    Still open: Truepic is not on the C2PA Conforming Products List and its CA is not on the C2PA Trust List (checked 2026-10-28), so a validator will not report the manifest as Trusted. Web captures are signed on Truepic's server, not on the device. No revocation policy for signing keys is documented. Signing does not detect a re-photographed screen; pop_result (under content) is a model's verdict.

    Content · Claimed. Integrity: content credentials and capture_integrity_result (signed details verified; the upload checked by data_result). Depiction: pop_result flags photos of a screen or a print; optional object_detection_result and content_analysis_result (odometer, VIN, text); optional AI Analysis.

    Still open: Truepic calls AI Output probabilistic and "not a definitive determination". The default checks cover tampering, not whether the photo shows the right thing. Integrity rests on Truepic's own CA; depiction checks (pop_result, object and content analysis) are detector verdicts and cannot raise content above claimed.

  5. 5. Known timestampReported

    Time · Claimed. time_result: device time within 5 minutes of server time and not modified. The time is signed into the capture's content credentials.

    Still open: The signature chains to Truepic's own CA, not the C2PA Trust List, and no RFC 3161 time-stamp is documented. The buyer has to trust Truepic's check.

    A time stated, not attested (RFC 3161, a log): Reported.

  6. 6. Tracked in transitNot stated

    Custody record (optional field) · Not stated

  7. 7. Independently verifiedNot stated

    Cross-check · Not stated

    Still open: Nothing independent confirms the capture. The Risk Network flags devices that other customers have flagged, which is a fraud signal, not confirmation.

  8. 8. Delivered to youNot stated

    Delivery receipt (optional field) · Not stated

API

Needs a sales or approval step first.

base
https://vision-api.truepic.com/v3
auth
OAuth
access
By agreement
adapter
truepic-vision
pay
invoice, card
  • POST /inspections
  • PUT /text/request
  • GET /inspections/{inspectionId}
  • GET /inspections
  • POST /inspections/{inspectionId}/export

Rate limit. 20 requests / 10 s across all endpoints

Sources

24 sources
  1. Per-photo verification tests (time, geolocation, distance, capture integrity, data transfer, device integrity, picture of screen, optional content tests) vision.truepic.dev
  2. No self-serve sign-up or sandbox; native app, web app and WebView options; Lens attaches content credentials; app languages vision.truepic.dev
  3. Device attestation, root detection and on-device signing only in native apps; web signs server-side; photos and videos vision.truepic.dev
  4. Rate limit 20 requests / 10 s; OAuth 2.0 client credentials per organisation; no self-serve sandbox; real SMS/email in testing vision.truepic.dev
  5. Credentials generated by an admin in the Dashboard; token endpoint; 72-hour tokens vision.truepic.dev
  6. US and Europe (UK) regions, base and auth URLs vision.truepic.dev
  7. POST /inspections fields; SMS countries US, GB, IT, DE, NL, FR vision.truepic.dev
  8. Endpoint list, servers and security schemes (OpenAPI 3.91.0) vision-api.truepic.com
  9. OAuth authorization server metadata: no registration_endpoint vision-auth.truepic.com
  10. Inspection expiry behaviour vision.truepic.dev
  11. Geofencing near the address vision.truepic.dev
  12. Truepic signs with its own CA (Lens API, C2PA JUMBF manifest) vision.truepic.dev
  13. Risk Network insights (falsified_location, flagged devices) vision.truepic.dev
  14. Flex, Standard and Enterprise prices and per-use-case rates www.truepic.com
  15. 21-hour average turnaround; capture via email or text link in browser or app www.truepic.com
  16. Customer owns Customer Content; Truepic licence to improve Services; resale and Report-modification restrictions; invoicing and card payment www.truepic.com
  17. Virtual Inspection billing unit; AI Analysis content not used to train generalized models www.truepic.com
  18. May use anonymized, de-identified content to train internal AI models www.truepic.com
  19. AUP: no automated tools without express prior written authorization; no impersonation or falsified results www.truepic.com
  20. Truepic absent from the C2PA Conforming Products List raw.githubusercontent.com
  21. Truepic absent from the C2PA Trust List raw.githubusercontent.com
  22. Lens: content credentials on every capture; on-device signing in native apps, server-side signing on web; AppAttest/SafetyNet in native apps vision.truepic.dev
  23. Capture Integrity test: 'Securely signed; tamper-proof' vision.truepic.dev
  24. C2PA Conforming Products List (Truepic not listed, checked 2026-10-28) raw.githubusercontent.com
Notes

About. Truepic Vision sends the person at a property, vehicle or piece of equipment a capture link by text or email. They take photos and videos in the Truepic Vision app or a mobile browser. Each photo comes back with pass/warn/fail results: device time against server time, GPS spoofing, distance from the address, signed capture details, upload integrity, rooted or jailbroken phones (app only), and photos of a screen. Results arrive by API or webhook, with an optional PDF report and AI analysis. Access is sold to businesses with a $1,000/month minimum, and API credentials come only after Truepic sets up the organisation. The service has US and UK/Europe regions.

Price. Flex: month-to-month. The $1,000/mo minimum is one invoice that includes a use-case allotment (e.g. 200 recall inspections at $5); inspections above it bill at the plan rate. Per-inspection rate by use case: product recall $5, insurance underwriting $16–$48, home lending $29, auto warranty $36, construction lending $39, insurance claims $48, equipment financing and business credentialing $51. Standard (annual): headline $1,450/mo at $58/inspection for 300/yr; use-case tiers run down to $2/inspection for product recall at 50,000+/yr; overage $28–$65 by tier. Enterprise above 10,000/yr is custom. One Virtual Inspection covers up to 100 images from one person for one event; every further 100 images counts as another. AI Analysis is billed separately per subject.

Coverage. The regions are where the data is hosted, not where capture can happen. Capture happens wherever the recipient is. Links go out by email or SMS. SMS defaults to US numbers, and GB, IT, DE, NL and FR need a sender number set up by Truepic. Native-app languages: English, British English, Spanish, French (CA, FR), German, Portuguese (PT), Italian, Greek. The web app is English only.

Timing. Truepic home page: "21 hour Average turnaround time"; capture happens when the recipient opens the link.

Licence. Terms of Service §3.2: "As between Truepic and Customer, Customer owns all right, title, and interest in and to the Customer Content" (photos, data and other content from Customer or its End Users). Truepic gets a licence during the term to use the content "to provide and improve the Services and to create the Aggregated Anonymous Data", which it may use "for any lawful purpose". Reports ("analytics, data, and output generated from an inspection", including AI Output) are part of the Services, which Truepic owns. §4.4 bars selling, sublicensing or providing the Services to third parties and bars modifying any Report. Content from AI Analysis is 'not used to train or improve generalized AI models' (Additional Product Terms). The terms do not mention resale of the captured photos, or AI training by the buyer.

Compiled from public sources. Is this your company? Publish your card ›

Compiled from public sources · updated 2026-10-28JSONSiteCompare