SynthID Bio: Watermarking methods for synthetic biology - Google DeepMind

Strengthening biosecurity and information integrity

Biosecurity relies on layered defenses – think of it like a “Swiss cheese” defense model, where multiple independent safety measures work in tandem to cover each other’s blind spots. Safeguards like model-level mitigations and customer vetting each represent critical layers with potential gaps. As a part of our broader vision for bioresilience, SynthID Bio’s watermarking approach serves as an important, tangible verification layer embedded in the biological design itself.

“SynthID Bio is an important piece of the puzzle for tracking the provenance of biological designs,” said Sarah Carter, a biosecurity policy expert and Principal at Science Policy Consulting who reviewed the work. “By linking designs to the model developer, these watermarks empower developers to lead on safety and allow synthesis providers to streamline screening for customers who have used those models.”

That layer is especially vital to DNA synthesis screening, which sits on the frontlines of biosecurity. Converting digital protein designs into physical molecules requires placing an order with DNA synthesis providers, who screen requests against databases of known threats. For example, historically, an unfamiliar sequence may have been safely assumed to be an undiscovered natural organism. But because AI can create entirely new sequences with little resemblance to known hazards, screeners can no longer make that assumption. Verifying that an unfamiliar order isn't an engineered threat requires exhaustive manual reviews that can stall vital research. Here, SynthID Bio can provide an automated verification signal, proving an order originated from a trusted model with built-in safeguards.

"AI is expanding what scientists can design, and DNA synthesis companies have an important role in helping that innovation scale responsibly,” said James Diggans, Vice President, Policy and Biosecurity at Twist Bioscience, who provided early feedback on the paper. “For Twist, watermarking offers a promising new addition to the biosecurity toolbox that could strengthen screening, focus resources on sequences that warrant closer review and make biosecurity more efficient as AI-designed biology continues to advance."

Similarly, SynthID Bio could help maintain the integrity of databases such as the Protein Data Bank, UniProt, and GenBank. These databases, many of which are open to public submission, play a vital role in scientific advancements – but mislabeled entries can have an outsized negative impact in biosecurity decision-making, a challenge that may only grow with the addition of AI-generated biological data. As a part of the submission process, SynthID Bio could help ensure synthetic entries are properly labeled or flagged for further review.

Looking ahead

While no single biosecurity intervention is a silver bullet, SynthID Bio brings SynthID, our tried and tested watermarking tool, to synthetic biology. It’s an important first step toward reliably identifying and tracking AI-generated biological sequences and structures.

Moving forward, key challenges include making the watermark more robust against deliberate tampering. SynthID Bio can also be paired with provenance metadata approaches – similar to C2PA for digital media – or central repositories of AI-generated biological data to better identify and track AI-generated proteins.

To match the growing capabilities of frontier AI technology, we’re also researching how to apply watermarking to more complex biological objects. In ongoing work with the Hie lab at Stanford University and Arc Institute, we integrated SynthID Bio into Evo 2, an advanced genomic model, to watermark the genome of an Evo 2 designed bacteriophage. Early laboratory testing in bacteria cultures has confirmed these watermarked bacteriophages are functional. We believe this work has the potential to address some of the biosecurity risks associated with genome design and will share more details in a technical manuscript soon.

Realizing the full biosecurity benefits of this work will require community collaboration and further research. As part of our commitment to responsible innovation, we are publishing our methods paper and open-sourcing the code and in vitro data, and releasing the weights to the research community, so we can build on this work. By working openly with partners across biosecurity, gene synthesis, and policy, we can ensure safety and responsibility keeps pace with AI-driven discovery.

To reach out about partnering with us on this important topic, please contact us at synthidbio@google.com with a high level proposal. Please do not disclose any confidential or proprietary information.