AI Supply Chain Security supports two primary deployment modes to give you flexibility based on your network security requirements and how much data you want to share with HiddenLayer.
The Supply Chain CLI container can be deployed in either Hybrid Mode or Disconnected Mode. The architecture for these modes are very similar, except where the results are stored.
When Supply Chain CLI is deployed in Hybrid mode, metadata per scan will be sent back to HiddenLayer to power the UI and provide visualizations for users to review.

In the fully disconnected mode, all components including scanning and storage are hosted and operated entirely within your environment. There is no communication with the HiddenLayer Console or external APIs.
- Nothing leaves your environment, including scan results.
- The UI is not included in this mode; you'll interact with results directly from the terminal and logs.
- Results are stored locally.

Supply Chain CLI is a synchronous executable:
- Users invoke Supply Chain CLI by running the Docker image with command-line arguments that describe the model(s) to be scanned, and the location where scan results and scanner logs should be rendered.
- Supply Chain CLI executes the scan.
- The Docker container exits.