> ## Documentation Index
> Fetch the complete documentation index at: https://docs.maia.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Full SaaS vs Hybrid SaaS

> A comparison of the functional differences between Maia's Full SaaS and Hybrid SaaS deployment models.

Maia offers two deployment models: Full SaaS and Hybrid SaaS. Both give you access to the same Maia platform, Designer interface, and pipeline features—the difference is where the Maia runner runs and who manages it.

* **Full SaaS:** Matillion hosts and manages the Maia runner for you. There's no infrastructure to set up—every Maia account includes a Full SaaS Maia runner from the moment you create your first project.
* **Hybrid SaaS:** You deploy and manage the Maia runner within your own cloud infrastructure (AWS, Azure, Google Cloud, or Snowflake). This gives you more control over networking, scaling, and where your secrets and data are processed.

This feature is only available to customers on specific Maia plans. Visit the Maia [Pricing](https://www.maia.ai/pricing) page to learn more.

You choose a deployment model per project, and a project can't switch between models later—read [Migrating from Full SaaS to Hybrid SaaS](https://docs.maia.ai/docs/guides/runner-overview.md#migrating-from-full-saas-to-hybrid-saas) if you need to move a project. For a deeper look at how each model fits together, read [Maia product architecture](https://docs.maia.ai/docs/guides/architecture-overview.md) and [Deployment options](https://docs.maia.ai/docs/security/deployment-options.md).

The rest of this page lists the specific functional differences between the two models.

***

## Runner deployment and management

| Feature | Full SaaS | Hybrid SaaS |
| - | - | - |
| Runner hosting | Provisioned automatically at project creation; can't be manually added or removed. | You deploy and manage your own Maia runner in [AWS, Azure, Google Cloud, or Snowflake](https://docs.maia.ai/docs/guides/create-a-runner.md). |
| Runner management actions | Not available—Matillion manages the Maia runner for you. | Pause, restart, remove, and test connectivity from the [Runners page](https://docs.maia.ai/docs/guides/manage-runners.md). |
| Version track | Always on the Current track and updates automatically. | Choose between the [Current or Stable](https://docs.maia.ai/docs/guides/runner-updates.md) track, with optional automatic updates. |
| Scaling | Automatic; no manual scaling required. | Kubernetes-hosted Maia runners (EKS, AKS, GKE) support autoscaling via Kubernetes HPA. Manual scaling is required for ECS Fargate and Azure Container Apps deployments. Read [Scaling best practices](https://docs.maia.ai/docs/guides/scaling-best-practices.md). |
| Dedicated shared script runner (for Script Pushdown) | Not available. | [Available](https://docs.maia.ai/docs/guides/shared-script-runner.md), with a maximum of one per Maia runner instance. |
| Access runner logs | You can't access Maia runner logs, but Matillion can access them for support purposes. | You can access Maia runner logs, and can choose to send them to Matillion for support purposes. Read [Export logs](https://docs.maia.ai/docs/guides/export-logs-hybrid-saas.md). |

***

## Secrets and credentials

| Feature | Full SaaS | Hybrid SaaS |
| - | - | - |
| Secret storage | Stored in Matillion's hosted vault, on Matillion's own AWS infrastructure. | Stored in your own [AWS Secrets Manager, Azure Key Vault, or Google Cloud Secret Manager](https://docs.maia.ai/docs/guides/secrets-and-secret-definitions.md). |
| Updating a secret value | Update the value directly in Maia. | Update the value in your own vault—Maia only stores a pointer to it. |
| Deleting a secret | Also removes the value from Matillion's vault. | Must also be deleted manually from your own vault. |
| Cloud provider credentials | Always required, to let Matillion access your cloud resources. | Only required for resources outside the platform hosting your Maia runner. Read [Cloud credentials](https://docs.maia.ai/docs/guides/cloud-credentials.md). |

***

## Networking and security

| Feature | Full SaaS | Hybrid SaaS |
| - | - | - |
| Custom drivers (JDBC, SAP, NetSuite) | Not available. | [Available](https://docs.maia.ai/docs/guides/uploading-external-drivers.md)—upload drivers to a storage location the Maia runner can access. |
| Custom Python libraries | Not available. | [Available](https://docs.maia.ai/docs/guides/installing-python-libraries.md). |
| Proxy server support | Not supported. | [Supported](https://docs.maia.ai/docs/guides/customizing-runner-networking-and-connectivity.md) using the `PROXY_HTTP`, `PROXY_HTTPS`, and `PROXY_EXCLUDES` runner parameters. |
| Custom certificates | Not supported. | Supported using the `CUSTOM_CERT_LOCATION` runner parameter. |
| Private connectivity | [AWS PrivateLink](https://docs.maia.ai/docs/guides/aws-privatelink.md) connects Matillion's control plane to Snowflake or AWS-hosted sources. | [AWS PrivateLink](https://docs.maia.ai/docs/guides/connecting-via-privatelink.md) connects your own runner to Matillion's control plane, alongside full network isolation for the runner itself. |
| SSH tunneling to network-secured databases | [Supported](https://docs.maia.ai/docs/security/ssh-tunnelling.md) via the Database Query and RDS Query components. | Not typically required, as your runner already sits inside your own network. |

***

## Components and connectors

| Feature | Full SaaS | Hybrid SaaS |
| - | - | - |
| Standard connector library | 130+ connectors available. | 130+ connectors available. |
| Custom JDBC connectors | Not available. | Available—[JDBC](https://docs.maia.ai/docs/components/jdbc) and [JDBC Load](https://docs.maia.ai/docs/components/jdbc-load.md). |
| SAP ODP | Not available. | [Available](https://docs.maia.ai/docs/components/sap-odp.md). |
| SAP NetWeaver | Not available. | Available—[SAP NetWeaver](https://docs.maia.ai/docs/components/sap-netweaver.md) and [SAP NetWeaver Load](https://docs.maia.ai/docs/components/sap-netweaver-load.md). |
| NetSuite SuiteAnalytics | Not available. | Available—[SuiteAnalytics](https://docs.maia.ai/docs/components/netsuite-suiteanalytics.md) and [SuiteAnalytics Load](https://docs.maia.ai/docs/components/netsuite-suiteanalytics-load.md). |
| Python Script | Not available. Use [Python Pushdown](https://docs.maia.ai/docs/components/python-pushdown.md) instead (Snowflake only). | [Available](https://docs.maia.ai/docs/components/python-script.md). |
| Script Pushdown | Not available. | [Available](https://docs.maia.ai/docs/components/script-pushdown.md); requires a shared script runner. |

***

## Data residency

| Feature | Full SaaS | Hybrid SaaS |
| - | - | - |
| Region | Fixed to your account region, set when the account is created. | Runner can be hosted in [a region of your choice](https://docs.maia.ai/docs/administration/account-regions.md), independent of your account region. |


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.