Amid legal battles, Suno says it will start watermarking songs

Suno just announced it will watermark AI-generated songs. The timing is not coincidental. The company faces lawsuits from Universal Music Group, Sony Music, and a German licensing body that already ruled against it. A class action in Massachusetts alleges Suno sacrificed security for profit after a breach exposed 55 million users. The watermarking announcement reads like a legal brief dressed up as a product update.

Mikey Shulman, Suno's co-founder and CEO, frames the new tools as enabling "original creation" and giving artists "transparency options." He says the platform won't judge whether a song is "good, meaningful, or sufficiently human." That is a careful evasion. The real question is whether Suno's model itself is sufficiently human — or whether it was built on millions of songs ingested without permission. The company's own breached data revealed scraping of YouTube, Deezer, and Genius. That is not original creation. That is industrial-scale appropriation.

Watermarking does not fix the training data problem. It addresses a downstream symptom: users uploading AI tracks to Spotify or Apple Music and collecting streaming royalties. Suno now promises audio fingerprinting to block that behavior. It won't say whether it uses Google's SynthID or a proprietary system. It won't say when the system goes live. It won't detail the new download restrictions. The vagueness is strategic. Specifics create enforceable promises; ambiguity buys time in court.

The partnership with Musixmatch's Sentinel system for copyright detection is similarly reactive. Suno needs to demonstrate good faith to judges. A third-party copyright scanner lets the company say it's trying. Whether it actually catches the infringements embedded in its own model outputs is another matter. Sentinel scans uploads. It does not audit the latent space of the model itself.

Shulman's blog post insists the tools are "durable and resistant to tampering, without affecting the listening experience." That claim deserves skepticism. Audio watermarking that survives compression, re-encoding, and adversarial stripping is a hard technical problem. The industry has spent two decades on this. No solution is permanent. Suno's assertion that its marks are tamper-proof is either naive or disingenuous.

The community guideline updates prohibit "deceptive audio presented as real" and unauthorized use of a person's voice or likeness. These are necessary rules. They are also the bare minimum for a platform that enables voice cloning at scale. Suno did not invent the deepfake audio problem, but it commercialized it. Now it wants credit for putting up guardrails after the horses have bolted.

The German ruling matters more than Suno admits. GEMA, a government-mandated licensing agency, won a decision that Suno breaks copyright law. That ruling carries weight across Europe. It suggests the legal framework already treats AI training on copyrighted works as infringement. Suno's $400 million Series D in June bought runway, not immunity. Investors backed a company whose core asset — its model — may be legally toxic.

The Massachusetts class action adds a different vector: negligence. The breach notification service Have I Been Pwned confirmed 55 million affected users. The complaint alleges Suno prioritized profit over security. That charge sticks because it aligns with the broader pattern. Scrape first, ask later. Grow fast, secure later. Watermark later. The sequence reveals priorities.

Suno's defense rests on a familiar argument: the platform is a tool, not a publisher. Users generate; Suno provides infrastructure. That argument works until the tool's output floods the market and the tool's training data turns out to be stolen. Then the platform looks like a laundering operation. Watermarking the output doesn't clean the input.

Shulman says "it should be up to artists and platforms to decide what they want to disclose." That is a shifting of burden. Artists never agreed to have their work ingested. Platforms never agreed to host unlimited AI slurry. Suno unilaterally changed the economics of music production. Now it asks the victims to opt out of a system they never opted into.

The watermarking announcement is a tactical concession. It may help in settlement talks. It may impress a judge. It does not resolve the fundamental conflict. AI music generation at this scale requires either licensed training data or a legal regime that permits unlicensed scraping. The latter is collapsing. The former costs money Suno would rather not spend.

Expect more announcements like this. Expect more partnerships with rights-tech vendors. Expect more guideline tweaks. Each will be framed as empowerment. Each will be a bandage on a structural wound. The only durable solution is a license. Suno knows this. Its investors know this. The lawsuits exist to force the negotiation.

Until then, watermarks are just metadata on stolen goods.