Outbound-only connections
No inbound firewall rules. The data plane initiates every connection to the control plane.
Airbyte Enterprise Flex
Airbyte Flex offers a hybrid deployment model, with Airbyte's data plane running in your cloud, VPC, or on-prem environment. You get 600+ connectors and a fully managed experience, while your data never touches our servers.
Trusted by data teams at
Forrester TEI ROI
of the F500 uses Airbyte
pipelines synced daily
Architecture
The data plane runs in your environment, not ours. We run the control plane so you don't have to. Your records, credentials, and keys stay inside your environment; the control plane receives configuration and job metadata only.
Your environment
Airbyte
Stays in your environment
Reaches Airbyte
No inbound firewall rules. The data plane initiates every connection to the control plane.
Bring your own KMS. Airbyte never holds credentials or encryption material.
Pin the data plane to a specific cloud, region, or on-prem site to satisfy residency requirements.
Why Flex
Without Flex
Deployment models
Agents on Sovereign Data
The same environment that holds your data can run your AI.
Bring your own models: open-weight, fine-tuned, or fully self-hosted. Your agents' context never leaves your environment either.
Sovereignty & Compliance
Compliance is the downstream consequence of the environment, not a contractual add-on.
Keep customer records, PII, and transaction data inside your regulated network segment while still moving them at scale.
Move PHI between EHRs, warehouses, and analytics without a HIPAA-covered vendor ever touching the payload.
Meet GxP and regional residency rules by running the data plane next to your validated systems.
Built for the enterprise
SAML and OIDC single sign-on with role-based access down to the workspace and connection level.
Every configuration change, sync run, and access event is captured and streamable to your SIEM.
Run data planes in multiple regions from a single control plane; pin workloads to residency zones.
99.9% control-plane availability, backed by financial credits.
Pay for sync frequency, not per-row or per-GB. Costs stay flat as volume grows.
24×7 response with a named solutions architect and defined incident response times.
Pricing model
Flex is priced on capacity, not volume, so costs stay predictable as data grows.
What plans does Airbyte offer, and how do they differ?
Airbyte offers four Data Replication tiers. Core is self-managed open source, always free. Standard is fully managed cloud hosting starting at $10/month with volume-based pricing. Pro adds capacity-based pricing via Data Workers (so costs don't spike with data volume), 15-minute syncs, SSO, RBAC, multiple workspaces, and premium support. Enterprise Flex is the top tier: a hybrid architecture where Airbyte manages the control plane and you run data planes in your own infrastructure. It includes everything in Pro plus multi-region deployment, on-prem and air-gapped options, external secrets management, PrivateLink, and audit logging. Flex pricing is custom.
Can Flex run on-prem or air-gapped?
Yes. Flex decouples the control plane (managed by Airbyte) from the data plane (runs in your environment). You deploy data planes on-prem or in air-gapped networks using Helm on Kubernetes (EKS, GKE, AKS) or using Airbox, a single-node deployment utility that runs on a VM with Docker. Your data and credentials never leave your boundary.
Which clouds and regions are supported?
Flex supports AWS, Google Cloud, and Azure. Deploy data planes on Amazon EKS, Google Kubernetes Engine, or Azure Kubernetes Service. You choose the region: create a cluster in the region you need (e.g. eu-west-1), and the data plane runs there. Each workspace maps to one region and data plane, so you can run multiple workspaces across different regions from a single control plane. Airbyte also offers fully managed data planes in US and EU regions for workloads that don't require self-managed infrastructure.
How do upgrades work?
Airbyte manages control plane upgrades automatically. For self-managed data planes, you upgrade via Helm or Airbox on your own schedule. Any Airbyte Cloud environment on Standard or Pro can upgrade to Enterprise Flex. The control plane transition is handled by Airbyte; data plane migration requires some infrastructure planning, but the technical process is straightforward. Talk to sales for a migration plan.
How is Flex different from self-managing open-source Airbyte?
Open-source Airbyte (Core) gives you the full replication engine, self-hosted, with community support. Flex adds the managed control plane so you don't maintain orchestration, UI, or API infrastructure yourself. On top of that, Flex includes SSO (Okta, Entra ID), RBAC at the org and workspace level, field-level transformations (hashing, encryption, filtering), external secrets management (AWS, GCP, Azure Key Vault, HashiCorp Vault), PrivateLink, audit logging, and premium support with SLAs. You keep the same data sovereignty as self-hosted, without the operational overhead of running everything.
Can I run agents and my own models on Flex?
Flex is Airbyte's Data Replication tier, purpose-built for moving data to warehouses, lakes, and applications. You can bring your own models on top of Flex, using your native warehousing solutions. We recommend this if you must maintain sovereignty while building our your AI initiatives. You can also integrate Airbyte's open source agent connectors for any real-time agent actions. If you don't need a fully sovereign solution for AI, Airbyte offers a separate product line: Airbyte Agents. Agents gives your AI models pre-indexed context and read/write access to 50+ business systems through an MCP server, a Python SDK, or a no-code Automation builder. You can use both together: Flex handles sovereign data replication into your infrastructure, and Agents provides the context layer your models query at runtime. Agents has its own plans starting with a free tier (1,000 Agent Operations/month).