Outbound-only connections
No inbound firewall rules. The data plane initiates every connection to the control plane.
Hybrid Deployment
Airbyte Flex offers a hybrid deployment model, with Airbyte's data plane running in your cloud, VPC, or on-prem environment. You get 700+ connectors and a fully managed experience, while your data never touches our servers.
Trusted by data teams at
ROI, certified by
of the F500 uses Airbyte
pipelines synced daily
Architecture
In a hybrid deployment, the data plane runs in your environment, not ours. We run the control plane so you don't have to. Your records, credentials, and keys stay inside your environment; the control plane receives configuration and job metadata only.
Your environment
Airbyte
Stays in your environment
Reaches Airbyte
No inbound firewall rules. The data plane initiates every connection to the control plane.
Bring your own KMS. Airbyte never holds credentials or encryption material.
Pin the hybrid deployment data plane to a specific cloud, region, or on-prem site to satisfy residency requirements.
Why hybrid deployment
Without hybrid deployment
Deployment models
Agents on Sovereign Data
The same hybrid deployment that moves your data can run your AI.
Bring your own models: open-weight, fine-tuned, or fully self-hosted. Your agents' context never leaves your environment either.
Sovereignty & Compliance
Compliance is the downstream consequence of hybrid deployment, not a contractual add-on.
Keep customer records, PII, and transaction data inside your regulated network segment while still moving them at scale.
Move PHI between EHRs, warehouses, and analytics without a HIPAA-covered vendor ever touching the payload.
Keep classified data, citizen PII, and case records inside agency boundaries without a vendor ever touching the payload.
Built for the enterprise
SAML and OIDC single sign-on with role-based access down to the workspace and connection level.
Every configuration change, sync run, and access event is captured and streamable to your SIEM.
A hybrid deployment runs data planes in multiple regions from a single control plane and pins workloads to residency zones.
99.9% control-plane availability, backed by financial credits.
Pay for sync frequency, not per-row or per-GB. Costs stay flat as volume grows.
24×7 response with a named solutions architect and defined incident response times.
Pricing model
Airbyte Flex, a hybrid deployment, is priced on capacity, not volume, so costs stay predictable as data grows.
What is Airbyte hybrid deployment?
What plans does Airbyte offer, and how do they differ?
Can hybrid deployment run on-premises?
Which clouds and regions does hybrid deployment support?
How do upgrades work on hybrid deployment?
How is hybrid deployment different from self-managing open-source Airbyte?
Can I run agents and my own models on hybrid deployment?