No hosted code index.
AIndex reads and indexes your repo into a local .ai-indexer/ folder (SQLite). Your source is never uploaded.
Security
Your source code never leaves your machine.
AIndex is local-first by design. It reads and indexes your repo entirely on your machine — the only thing that ever touches the network is license activation and signed updates.
Signed releases
Verified before anything runs.
Enterprise buyers can request architecture notes, a data-boundary summary, the network surface, release-verification details and offline-license terms.
Data boundarysource stays local
Nothing phones home.
No usage tracking, no analytics, no background calls. The Free tier runs fully offline.
Only license checks and updates.
On paid plans, the network is used solely for license activation, seat checks and signed self-updates — never for your code.
Run it fully air-gapped.
A long-lived local license lets Enterprise teams run AIndex offline, with no network checks at all.
Signed releases
Verified before anything runs.
- Every release is signed with Ed25519 and verified before install.
- Artifacts are checked against published SHA-256 checksums.
- A CycloneDX SBOM is published for every release.
- Build provenance is published and downloadable for each version.
- The Free tier runs entirely offline — no account, no network.
Supply chain
Public provenance, downloadable for every release.
SBOM
A CycloneDX SBOM is published for each release, with its SHA-256 checksum so you can verify the document.
Release evidence
The release manifest, build provenance and Ed25519 public key are published alongside the downloadable artifacts.
Procurement
Everything your security team needs to sign off.
Enterprise buyers can request architecture notes, a data-boundary summary, the network surface, release-verification details and offline-license terms.