Air-Gapped Environments

ComplyForm works fully offline. No telemetry, no network calls, no cloud dependency.

Community tier

The Community tier is air-gapped by default. No license key is required — install the binary and run. All 53 framework profiles ship with the CLI.

Paid tiers — offline license

Paid tiers (Team, Agency) require a license file for offline use.

1. Download your license from the ComplyForm dashboard.
2. Place the file at ~/.complyform/license, or set the COMPLYFORM_LICENSE_PATH environment variable to a custom path.

# Default location
cp complyform-license.key ~/.complyform/license

# Or use an environment variable
export COMPLYFORM_LICENSE_PATH=/opt/complyform/license.key

The license file is Ed25519-signed and contains your tier, expiry date, and enabled features. The CLI verifies the signature locally — no network call needed.

Caution

License files have an expiry date. Download a renewed license before the current one expires, or the CLI will fall back to Community tier features. Run complyform doctor to check your license status at any time.

Profile bundles

Framework profiles can be updated independently of the CLI. In air-gapped environments, download profile bundles from a connected machine and transfer them.

# On a connected machine
complyform update --profiles-only --download-bundle=complyform-profiles.tar.gz

# Transfer to the air-gapped machine, then extract
tar -xzf complyform-profiles.tar.gz -C ~/.complyform/profiles/

# Or set a custom path
export COMPLYFORM_PROFILES_PATH=/opt/complyform/profiles

Profile bundles are Ed25519-signed. The CLI rejects tampered or unsigned bundles.

Verify the installation

Run complyform doctor to confirm the CLI, license, and profiles are correctly configured.

complyform doctor

Expected output in an air-gapped environment:

ComplyForm Doctor
  CLI version:    1.4.2           ✓
  License:        Team (expires 2026-09-15)  ✓
  Profiles:       53 frameworks loaded       ✓
  Network:        unreachable                (expected in air-gapped mode)
  Checkov:        3.2.74 installed           ✓

Complete air-gapped workflow

# Scan existing infrastructure
complyform scan --state=terraform.tfstate

# Assess against FedRAMP High (common in air-gapped environments)
complyform assess --frameworks=fedramp_high --output=json --output-file=findings.json

# Generate remediation patches
complyform remediate --frameworks=fedramp_high

# Validate patches
complyform validate

# Export evidence for auditors
complyform export --format=grc-json --input=findings.json --output-file=evidence.json

Next steps

• complyform doctor — verify installation and configuration
• complyform activate — license activation options
• Evidence Export — export formats for audit evidence