---
title: "Air-Gapped Environments"
description: "Use ComplyForm without network access using offline license and profile bundles."
---

import { Aside } from '@astrojs/starlight/components';

ComplyForm works fully offline. No telemetry, no network calls, no cloud dependency.

## Community tier

The Community tier is air-gapped by default. No license key is required — install the binary and run. All 53 framework profiles ship with the CLI.

## Paid tiers — offline license

Paid tiers (Team, Agency) require a license file for offline use.

1. Download your license from the [ComplyForm dashboard](https://app.complyform.dev/settings/license).
2. Place the file at `~/.complyform/license`, or set the `COMPLYFORM_LICENSE_PATH` environment variable to a custom path.

```bash
# Default location
cp complyform-license.key ~/.complyform/license

# Or use an environment variable
export COMPLYFORM_LICENSE_PATH=/opt/complyform/license.key
```

The license file is Ed25519-signed and contains your tier, expiry date, and enabled features. The CLI verifies the signature locally — no network call needed.

<Aside type="caution">
License files have an expiry date. Download a renewed license before the current one expires, or the CLI will fall back to Community tier features. Run `complyform doctor` to check your license status at any time.
</Aside>

## Profile bundles

Framework profiles can be updated independently of the CLI. In air-gapped environments, download profile bundles from a connected machine and transfer them.

```bash
# On a connected machine
complyform update --profiles-only --download-bundle=complyform-profiles.tar.gz

# Transfer to the air-gapped machine, then extract
tar -xzf complyform-profiles.tar.gz -C ~/.complyform/profiles/

# Or set a custom path
export COMPLYFORM_PROFILES_PATH=/opt/complyform/profiles
```

Profile bundles are Ed25519-signed. The CLI rejects tampered or unsigned bundles.

## Verify the installation

Run `complyform doctor` to confirm the CLI, license, and profiles are correctly configured.

```bash
complyform doctor
```

Expected output in an air-gapped environment:

```
ComplyForm Doctor
  CLI version:    1.4.2           ✓
  License:        Team (expires 2026-09-15)  ✓
  Profiles:       53 frameworks loaded       ✓
  Network:        unreachable                (expected in air-gapped mode)
  Checkov:        3.2.74 installed           ✓
```

## Complete air-gapped workflow

```bash
# Scan existing infrastructure
complyform scan --state=terraform.tfstate

# Assess against FedRAMP High (common in air-gapped environments)
complyform assess --frameworks=fedramp_high --output=json --output-file=findings.json

# Generate remediation patches
complyform remediate --frameworks=fedramp_high

# Validate patches
complyform validate

# Export evidence for auditors
complyform export --format=grc-json --input=findings.json --output-file=evidence.json
```

## Next steps

- [`complyform doctor`](../../cli-reference/doctor/) — verify installation and configuration
- [`complyform activate`](../../cli-reference/activate/) — license activation options
- [Evidence Export](../evidence-export/) — export formats for audit evidence
