Google DeepMind announced SynthID Bio, a proof-of-concept family of watermarking methods built specifically for synthetic biology. The system embeds an imperceptible signature directly into biological code, so the mark can be verified not only on a digital model but on the synthesized, physical protein itself — while preserving the protein's biological function in laboratory testing.
The announcement frames the work as a response to a widening gap in biosecurity. Generative AI tools such as AlphaFold, AlphaProteo, and ProteinMPNN are helping scientists predict and design proteins, and more recently bacteriophages. But DeepMind notes that novel AI designs can bypass traditional DNA synthesis screening, while mislabeled synthetic 3D structures risk polluting public databases and misleading downstream research.
SynthID Bio adapts its approach to the data type: it subtly guides the choice of amino acids for sequences and adjusts atomic coordinates for predicted 3D structures, creating a reliable detection signal. In experiments, these adjustments did not compromise biological function, the company said.
DeepMind verified the approach for protein binders using its AlphaProteo binder design method alongside a SynthID Bio-enabled version of ProteinMPNN. In wet-lab testing across three targets — VEGF-A, the SARS-CoV-2 spike protein RBD, and PD-L1 — the watermarked designs matched unwatermarked versions on hit rate, binding affinity, and natural sequence diversity. DeepMind describes them as the first-ever watermarked and biologically functional protein binders.
For protein folding, SynthID Bio fine-tunes a small part of AlphaFold 3's diffusion network, building the watermarking ability directly into the model's weights so predicted 3D coordinates carry a detectable signature regardless of who runs the model. DeepMind says this preserves AlphaFold 3 prediction accuracy while offering near-perfect detectability, maintaining key structural feature distributions and holding up against digital noise or minor coordinate changes.
The company positions the watermark as one layer in a layered "Swiss cheese" biosecurity model, alongside model-level mitigations and customer vetting. It points to DNA synthesis screening as a key application: because AI can create sequences with little resemblance to known hazards, screeners can no longer assume an unfamiliar sequence is a harmless undiscovered organism, and exhaustive manual review can stall research. SynthID Bio could provide an automated verification signal showing an order originated from a trusted model with built-in safeguards.