Choose how to run Falcon
Run your agents with Hosted by Falcon, or in your company's own AWS account. You build them the same way in both.
Every company starts with Hosted by Falcon. You build, test and make agents Live the same way in both, so the choice is about where they run and who AWS bills, not about how you work.
Compare the two
| Hosted by Falcon | Your own AWS account | |
|---|---|---|
| What you set up | Nothing. Sign up and build. | An AWS account for your company: one Falcon creates for you, or one you already own. You add a role it trusts. |
| Where agents run | On Amazon Bedrock AgentCore, in Falcon's AWS account, kept apart from every other company. | On Amazon Bedrock AgentCore, in your AWS account. Each environment can have its own account. |
| Who AWS bills | Falcon, which bills you for what your agents use. | You, directly, for what runs in your account. Falcon bills you for Falcon. |
| Your data | Kept in Falcon's AWS account, in storage for your company alone. | Kept in your account, where your own AWS tools and policies apply. |
| Spend protection | Daily and monthly limits, and a switch that stops model calls at once. | The same limits, plus anything you set in AWS, such as budgets. |
| How Falcon reaches it | Falcon runs it for you. | Through roles your account trusts, a few minutes at a time: read-only checks, and deploy access only when someone deploys. Deleting the role cuts access at once. |
| If Falcon can't reach it | Falcon looks after it. | Your agents keep running. Falcon holds no AWS keys. |
| Best for | Getting started, pilots and most companies. | Companies whose rules say data and compute stay in their own cloud account. |
What stays the same
- Building, testing and making versions Live, in the same pages.
- Who can do what: roles and permissions come from Falcon, not from AWS.
- Connections, identities and workflows.
- Using your own model keys, so model spend is on your provider account.
- AI assistants connected over MCP, with the same access as the person who connected them.
Before you choose your own account
An administrator adds the account in Company settings › Deployment accounts. Falcon shows which account each agent runs in, and when it last checked and deployed each one.