Pricing
AIIR is available today as free open source. Hub and Fortress are limited-access commercial programs we discuss directly with teams that need them.
Product boundary
AIIR and the VS Code extension are the local operator surfaces: one repo, one workspace, immediate evidence generation and verification. Hub is the governance layer for many repos, many teams, policy rollout, waivers, and centralized audit workflows.
AIIR
Open-source local operator surfaces: CLI, VS Code extension, CI integrations, and AI assistants via MCP. Apache 2.0.
- Unlimited receipts
- CLI + VS Code extension + CI + AI assistants via MCP
- Content-addressed hashing
- AI signal detection
- JSONL export
- Sigstore signing
- Zero runtime dependencies (CLI core)
- Public GitHub issues and discussions
Hub
Hub is our managed governance plane for teams already generating AIIR receipts and needing centralized policy, review, reporting, and fleet visibility.
- Everything in AIIR, plus:
- Cross-repo receipt review workflows
- Policy rules, waivers, and exception handling
- Organization-wide audit search and export
- Trend views across teams, repositories, and releases
- Operational reporting for security and compliance
- Design-partner onboarding and roadmap access
- Direct email coordination
Fortress
Fortress is our planned private deployment model for organizations that need isolated verification operations, controlled environments, and custom assurance workflows. Not generally available.
- Everything in Hub, plus:
- Private deployment options
- Air-gapped or tightly controlled environment support
- Custom assurance workflows
- Integration planning for regulated environments
- Program-level support and architecture review
- Commercial support terms
- Dedicated support engineer
Frequently asked questions
Is AIIR really free?
Yes. AIIR is open-source under the Apache 2.0 license. You can use it in production, commercially, forever. No usage limits, no feature gates, no phone-home telemetry.
How do I get Hub access?
Hub is available on a limited basis to teams already using AIIR or evaluating it seriously. Request access and we'll confirm fit, timeline, and what parts of the workflow are live for your use case. The public request path is open, but direct environment linking stays closed until the security review and public exposure controls are ready. See the secure access path →
Does the VS Code extension replace Hub?
No. The extension is part of AIIR's local operator surface. It is for work inside one repository: initialize, receipt, verify, inspect, and automate. Hub exists for the organizational questions the extension should not try to own: many repositories, many teams, centralized policy, waivers, and fleet-wide reporting.
What's the difference between Hub and Fortress?
Hub is the managed governance layer around AIIR receipts: review workflows, policy handling, audit search, and reporting. Fortress is the private-deployment path for organizations that need tighter environmental control, custom assurance workflows, or commercial support in regulated settings.
Can I use AIIR without Hub or Fortress?
Absolutely. AIIR is fully self-contained. Receipts are just JSON files — store them however you want: in your repo, in S3, in a database. Hub and Fortress are optional layers for teams that want more process, governance, and direct coordination around the same receipt format.
Do you offer volume discounts?
Hub and Fortress pricing depends on team size and requirements. Request Hub pricing and we'll scope it with you.
What does "verification scoring" actually measure?
Where Hub exposes scoring, it is about workflow and declared-policy adherence, not code quality and not mind-reading. AIIR detection is heuristic-based (see the threat model), so any derived score is an operational signal for review, not a claim that undeclared AI use can be proven from source alone.
Start receipting today
One command. Zero cost. Full audit trail.
pip install aiir && cd your-repo && aiir --prettyNeed help or want to engage?
Bug reports
File reproducible product bugs in the public tracker so fixes, regressions, and workarounds stay visible.
Questions and ideas
Use discussions for implementation questions, rollout feedback, and community conversation around AIIR.
Security reports
Do not post vulnerabilities publicly. Use the coordinated disclosure path with our published policy and response target.