OpenAI textGrain invisible watermarking in the EU

textGrain does not insert hidden characters, metadata, or anything a reader could spot. Instead, it uses a secret mathematical key to bias the probability distribution over the model's next-word predictions, embedding a statistical pattern directly into ordinary sentence structure ^[1]. OpenAI frames it simply as adding an invisible statistical signal to the model's word choices ^[2], detectable later by a dedicated classifier. In the roughly 20-page technical report OpenAI published on October 5, 2026, the company describes an 'entropy budget' mechanism that balances how strongly the watermark is applied against how much it constrains the model's output variability ^[3]. Because the signal needs enough token-level freedom to hide a detectable pattern, very short passages or low-entropy content such as mathematical answers are intrinsically harder to mark reliably ^[3].

The rollout timeline is deliberately split by jurisdiction: opt-in API access, off by default, opened globally on October 5, 2026, while eligible ChatGPT and Codex text in the EU gets the watermark automatically over the coming weeks, with a compliance grace period running to December 2, 2026 ^[3][4]. That design stands in direct contrast to Anthropic, which applies its SynthID-Text-based watermark globally with no regional toggle because it says it lacks a durable way to scope the feature by region ^[3]. Roughly 190 organizations, including OpenAI, Anthropic, Microsoft, Google, and Meta, had already signed the EU's Code of Practice on AI-generated content transparency by July 2026 ^[4], and non-compliance with Article 50 carries fines of up to 3% of global annual revenue ^[1]. The practical effect is a built-in compliance gap: most ChatGPT and API traffic outside the EU will remain unwatermarked unless a developer specifically opts in.

OpenAI's own numbers show detection around 80% on 200-token passages and about 95% on 400-token passages at a 1% false-positive rate ^[3][4], but that performance is brittle. Replacing just 10% of a passage's words with synonyms drops detection from roughly 92% to 66%, and a 25% replacement rate crashes it to about 17% ^[1][5]. Mathematical content and other low-entropy text show detection rates well below prose, and reliability varies by language, ranging from about 42.2% for Romanian to 69.0% for Spanish in OpenAI's own testing ^[3]. OpenAI's technical report is candid about the gap between lab conditions and reality, stating that strong performance under ideal conditions does not guarantee reliable detection in everyday use ^[2], and emphasizing that a detected watermark can indicate an OpenAI system touched a passage but says nothing about how much human judgment, editing, or creativity went into it ^[4][5].

Unlike the watermark itself, the detector is not public. Access is initially restricted to approved researchers and partner institutions including Cornell, ETH Zurich, and KInIT, while the EU's Code of Practice separately mandates access for EU regulators, law enforcement, media, fact-checkers, and civil-society groups ^[3]. OpenAI also claims textGrain's detection performance matched or exceeded Google DeepMind's SynthID for text ^[6], positioning its system as competitive on technical merit even as the access model remains gatekept. That combination, a mandate confined to one region, an opt-in default everywhere else, and a detector available only to vetted parties, is what has driven much of the public skepticism about whether textGrain is a genuine transparency tool or primarily a compliance checkbox.