> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zwiron.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Hosted vs Agent Mode

> Decide whether to run Zwiron pipelines hosted in the cloud or with an outbound-only agent inside your VPC or on-prem network.

Every Zwiron pipeline runs in one of two [execution modes](/concepts/execution-modes). Pick based on network reachability and compliance — not feature parity. Sync modes, catalog, and quality work in both.

## Quick decision

| Situation                                              | Use        |
| ------------------------------------------------------ | ---------- |
| Snowflake, BigQuery, or public cloud DBs you can reach | **Hosted** |
| Source behind a firewall / private VPC / on-prem       | **Agent**  |
| Compliance requires row data to stay on your network   | **Agent**  |
| You want zero infra to operate                         | **Hosted** |

## Hosted mode

Zwiron runs the pipeline on its infrastructure and connects outbound to your sources and destinations.

* Nothing to install
* Allowlist [static egress IPs](/concepts/network-access) when firewalls require known clients
* Best for cloud-to-cloud moves

## Agent mode

You place a lightweight [agent](/concepts/agent) next to your data. Sync runs on the agent; the agent dials out to Zwiron's control plane.

* **Outbound-only** — no inbound ports or VPN hairpin
* Row data stays in your network
* Install via [Install the Agent](/getting-started/install-agent)

## Can I mix both?

Yes. Many teams use **Hosted** for cloud warehouses and SaaS sources, and an **agent** only for private Postgres/MySQL. See [When to use the agent](/guides/when-to-use-agent).

## Related

* [Execution modes](/concepts/execution-modes)
* [Network access](/concepts/network-access)
* Product use case: [VPC agent on zwiron.com](https://zwiron.com/use-cases/vpc-agent)