> Graphify: shared context of codebase for agents and developers. Canonical: https://graphify.com/security · Full index: https://graphify.com/llms-full.txt

Security

# Every claim hereis checkable.

With the open-source engine, the source is open, the parsing is local, and there is no server of ours in the loop. Each of those can be verified against the code.

[Visit Trust Center](https://trust.graphify.com)

On your machine

## What never leaves it.

Three things, and none of them has anywhere else to be.

Your source code

Parsed entirely on-device by tree-sitter grammars for 33 languages. No API is called to read or analyse it.

The parsed graph

Every node and edge is computed and stored locally. Querying it is a local read, not a network request.

The artifacts

graph.html, GRAPH_REPORT.md and graph.json, written into your own repository in formats you can open and inspect.

Off it

## What your provider sees.

Stated plainly, because this is the part every other security page leaves vague.

What your assistant sends

The queries and prompts it chooses to send its model, under your keys, through your provider, on your terms. Graphify adds no channel of its own.

Nothing from Graphify

The open-source core has no server behind it. It makes no network calls of its own and sends no telemetry: there is nowhere for your data to go.

Why you can check it

## Four things you can go and look at.

None of them asks you to believe a page.

- ### Open source, Apache 2.0
  
  The full source is public and auditable. Every claim on this page can be checked against the code rather than taken on faith.
- ### On-device parsing
  
  In the open-source engine, the deterministic pass makes no network calls and your code is never uploaded.
- ### No telemetry
  
  There is no analytics SDK and no phone-home in the open-source codebase. The only network activity is what you start yourself.
- ### A named team
  
  Built by Graphify Labs, Y Combinator S26, and maintained by Safi Shamsi, the copyright holder named in the LICENSE file.

The real ones

## Official channels.

Other domains using the Graphify name, graphify.net among them, are not ours.

- [graphify.comThe only official Graphify website, operated by Graphify Labs.](https://graphify.com)
- [Graphify-Labs/graphifyThe Apache 2.0 source on GitHub. Releases are cut from this repository, and its README links back here.](https://github.com/Graphify-Labs/graphify)
- [graphifyy on PyPIThe only official distribution. Note the double y. Its metadata points at the GitHub organisation above.](https://pypi.org/project/graphifyy/)

Controls

## Where each one actually is.

Our Trust Center has the details below, plus our SOC 2 engagement letter and our October 2026 penetration test report (available on request). It also lists our controls and subprocessors. [Visit the Trust Center at trust.graphify.com](https://trust.graphify.com).

SOC 2 Type II

Our SOC 2 Type II engagement has started and the audit is in progress. There is no report yet; the engagement letter is in the Trust Center.

Encryption

The hosted enterprise layer is being built to TLS 1.3 in transit and AES-256 at rest, part of the early-access track. The open-source core needs none of it: it never sends your data anywhere.

SSO and audit logs

SSO over OIDC and JWT; the MCP server speaks OAuth 2.1 with your IdP. SAML is available with Enterprise. Exportable audit logs are part of the early-access track.

Self-host and VPC

Run the open-source core air-gapped or in your own VPC. What you ingest never leaves your infrastructure.

On-device by default

The CLI builds and queries your graph locally. No account, no telemetry, no server in the loop.

Data ownership

Your data is yours. Export or delete it at any time. We never train on it and never sell it.

FAQ

## Questions about trust

What people ask before they install it.

- Is Graphify safe?
  
  Yes, and you can verify it instead of taking our word for it. Graphify is Apache 2.0-licensed open source at github.com/Graphify-Labs/graphify, so the code is fully auditable. Parsing runs on your device with bundled tree-sitter grammars, and the deterministic pass makes no network calls and sends no telemetry. The official package is graphifyy on PyPI.
- Does Graphify send my code anywhere?
  
  With the open-source engine, no: your code is parsed on-device and never uploaded, it has no server of its own, and there is no telemetry. The only network activity is what you explicitly initiate: content you ask it to fetch with graphify add <url>, or the optional LLM backend you configure for semantic extraction, called with your own API keys. The hosted product at app.graphify.com is the other option, where Graphify builds and keeps your graph in the cloud on the repositories you connect.
- Is Graphify legit?
  
  Graphify is an open-source project by Graphify Labs, a Y Combinator S26 company, with a named maintainer, Safi Shamsi. The source is public at github.com/Graphify-Labs/graphify under the Apache 2.0 license, the official package is graphifyy on PyPI, and both point back to graphify.com.
- What are the official Graphify channels?
  
  The official website is graphify.com. The only official code sources are the GitHub organization github.com/Graphify-Labs/graphify and the PyPI package graphifyy. Other domains that use the Graphify name, for example graphify.net, are not affiliated with or operated by Graphify Labs.
- How do I make sure I install the real Graphify?
  
  Install the official PyPI package with uv tool install graphifyy (the package name has a double y), or build from source at github.com/Graphify-Labs/graphify. If you found instructions or downloads on another domain, verify them against docs.graphify.com/installation before running anything.

## Try Graphify now.

[Try for free](https://graphify.com/signup)

[Graphify](https://graphify.com/)

Shared context of codebase for agents and developers. Hosted, or open source on your own machine.

[SOC 2 Type IIAudit in progress](https://trust.graphify.com)

Ask AI about Graphify

- [ChatGPT](https://chatgpt.com/?q=Read%20https%3A%2F%2Fgraphify.com%2Fllms-full.txt%20and%20answer%20from%20it%20(fetch%20the%20page%20if%20you%20can%3B%20every%20page%20also%20has%20a%20.md%20version).%20Answer%20about%20Graphify%20by%20Graphify%20Labs%20at%20graphify.com%20specifically%2C%20not%20other%20tools%20with%20similar%20names.%0A%0AHow%20does%20Graphify%20give%20agents%20and%20developers%20a%20shared%20understanding%20of%20the%20codebase%2C%20turning%20huge%20monorepos%20and%20scattered%20business%20context%20into%20deep%2C%20shared%20knowledge%20that%20helps%20teams%20make%20safer%20changes%2C%20use%20AI%20efficiently%2C%20and%20avoid%20constantly%20relearning%20the%20codebase%3F%0A%0AAnswer%20in%20under%20150%20words%20and%20cite%20the%20source.%20If%20you%20cannot%20access%20it%2C%20say%20so.)
- [Claude](https://claude.ai/new?q=Read%20https%3A%2F%2Fgraphify.com%2Fllms-full.txt%20and%20answer%20from%20it%20(fetch%20the%20page%20if%20you%20can%3B%20every%20page%20also%20has%20a%20.md%20version).%20Answer%20about%20Graphify%20by%20Graphify%20Labs%20at%20graphify.com%20specifically%2C%20not%20other%20tools%20with%20similar%20names.%0A%0AHow%20does%20Graphify%20give%20agents%20and%20developers%20a%20shared%20understanding%20of%20the%20codebase%2C%20turning%20huge%20monorepos%20and%20scattered%20business%20context%20into%20deep%2C%20shared%20knowledge%20that%20helps%20teams%20make%20safer%20changes%2C%20use%20AI%20efficiently%2C%20and%20avoid%20constantly%20relearning%20the%20codebase%3F%0A%0AAnswer%20in%20under%20150%20words%20and%20cite%20the%20source.%20If%20you%20cannot%20access%20it%2C%20say%20so.)
- [Perplexity](https://www.perplexity.ai/search?q=Read%20https%3A%2F%2Fgraphify.com%2Fllms-full.txt%20and%20answer%20from%20it%20(fetch%20the%20page%20if%20you%20can%3B%20every%20page%20also%20has%20a%20.md%20version).%20Answer%20about%20Graphify%20by%20Graphify%20Labs%20at%20graphify.com%20specifically%2C%20not%20other%20tools%20with%20similar%20names.%0A%0AHow%20does%20Graphify%20give%20agents%20and%20developers%20a%20shared%20understanding%20of%20the%20codebase%2C%20turning%20huge%20monorepos%20and%20scattered%20business%20context%20into%20deep%2C%20shared%20knowledge%20that%20helps%20teams%20make%20safer%20changes%2C%20use%20AI%20efficiently%2C%20and%20avoid%20constantly%20relearning%20the%20codebase%3F%0A%0AAnswer%20in%20under%20150%20words%20and%20cite%20the%20source.%20If%20you%20cannot%20access%20it%2C%20say%20so.)
- [Google AI](https://www.google.com/search?udm=50&q=Read%20https%3A%2F%2Fgraphify.com%2Fllms-full.txt%20and%20answer%20from%20it%20(fetch%20the%20page%20if%20you%20can%3B%20every%20page%20also%20has%20a%20.md%20version).%20Answer%20about%20Graphify%20by%20Graphify%20Labs%20at%20graphify.com%20specifically%2C%20not%20other%20tools%20with%20similar%20names.%0A%0AHow%20does%20Graphify%20give%20agents%20and%20developers%20a%20shared%20understanding%20of%20the%20codebase%2C%20turning%20huge%20monorepos%20and%20scattered%20business%20context%20into%20deep%2C%20shared%20knowledge%20that%20helps%20teams%20make%20safer%20changes%2C%20use%20AI%20efficiently%2C%20and%20avoid%20constantly%20relearning%20the%20codebase%3F%0A%0AAnswer%20in%20under%20150%20words%20and%20cite%20the%20source.%20If%20you%20cannot%20access%20it%2C%20say%20so.)
- [Grok](https://grok.com/?q=Read%20https%3A%2F%2Fgraphify.com%2Fllms-full.txt%20and%20answer%20from%20it%20(fetch%20the%20page%20if%20you%20can%3B%20every%20page%20also%20has%20a%20.md%20version).%20Answer%20about%20Graphify%20by%20Graphify%20Labs%20at%20graphify.com%20specifically%2C%20not%20other%20tools%20with%20similar%20names.%0A%0AHow%20does%20Graphify%20give%20agents%20and%20developers%20a%20shared%20understanding%20of%20the%20codebase%2C%20turning%20huge%20monorepos%20and%20scattered%20business%20context%20into%20deep%2C%20shared%20knowledge%20that%20helps%20teams%20make%20safer%20changes%2C%20use%20AI%20efficiently%2C%20and%20avoid%20constantly%20relearning%20the%20codebase%3F%0A%0AAnswer%20in%20under%20150%20words%20and%20cite%20the%20source.%20If%20you%20cannot%20access%20it%2C%20say%20so.)
- [DeepSeek](https://chat.deepseek.com/?q=Read%20https%3A%2F%2Fgraphify.com%2Fllms-full.txt%20and%20answer%20from%20it%20(fetch%20the%20page%20if%20you%20can%3B%20every%20page%20also%20has%20a%20.md%20version).%20Answer%20about%20Graphify%20by%20Graphify%20Labs%20at%20graphify.com%20specifically%2C%20not%20other%20tools%20with%20similar%20names.%0A%0AHow%20does%20Graphify%20give%20agents%20and%20developers%20a%20shared%20understanding%20of%20the%20codebase%2C%20turning%20huge%20monorepos%20and%20scattered%20business%20context%20into%20deep%2C%20shared%20knowledge%20that%20helps%20teams%20make%20safer%20changes%2C%20use%20AI%20efficiently%2C%20and%20avoid%20constantly%20relearning%20the%20codebase%3F%0A%0AAnswer%20in%20under%20150%20words%20and%20cite%20the%20source.%20If%20you%20cannot%20access%20it%2C%20say%20so.)

© 2026 Graphify Labs. All rights reserved.

Hosted or on-device · Apache 2.0