Abstract: Embodiments related to controlling access to content are disclosed. In one disclosed embodiment, a computing system comprising an application program further includes a device identification code identifying the computing system. The computing system further includes a content manager configured to control access by the application program to a content package, and the content manager is further configured to update a device audit list of the content package upon allowing the application program to modify the content package. The content manager is further configured to digitally sign the content package with a private key of the computing system after the application program modifies the content package.