← All posts

The playbook, what this looks like for your company

Decision matrix matching workloads to deployment

Six archetypes by company size and footprint. Concrete recommendations. The decision matrix by workload. And the three-sentence rule worth tattooing on your AI strategy.

In this part
  • §6 · What this looks like for your company
  • §7 · The verdict, pick by job, not by company

§6 · What this looks like for your company

The right answer depends on two axes most often: how big you are, and where your customers and data live. Six rough archetypes, with the deployment patterns that actually ship.

Deployment archetypes by company size and footprint

Small & local-only (clinic, accounting firm, single-office trade)

Run open-source LLMs (Llama 3 8B, Mistral) on a Mac mini or a small workstation in the office. One agent per employee for internal tasks, document drafting, data entry, calendar management. Don't do outbound automation from the office IP unless you've thought about CGNAT and AUPs first. Use a SaaS tool (Smartlead, HubSpot) for any cold email so the reputation risk is theirs, not yours.

Small & worldwide (seed-stage SaaS, remote agency, solo SDR)

Skip on-prem entirely. Anthropic Managed Agents or Replit Agent for orchestration. For outbound, use a sequencing platform that handles mailbox rotation and IP warmup for you (Smartlead, Instantly, Lemlist). Your competitive advantage is iteration speed, don't sink it into infrastructure ops.

Mid-size & local (regional law firm, hospital, manufacturer)

Dedicated server in the office for RPA and internal agents, this is where the legacy systems live and the data can't move. Cloud API for the reasoning layer, but sanitize prompts (strip PII before it leaves the building). For outbound communications, use rep-level dedicated proxies or mailbox infrastructure, never the office IP. Budget ~€20–40k/year for hardware + ops.

Mid-size & worldwide (Series B SaaS, growth-stage e-commerce, modern agency)

Single-tenant cloud agent runtime in your VPC. Dedicated egress IPs (NAT Gateway + EIP per workload). Mailbox farm with 20–100 sending domains, warmed over weeks. BYOIP for any high-volume scraping where reputation matters. Cost is real (~€8–15k/month) but predictable.

Enterprise & local-only or regulated (bank, hospital network, government)

Self-hosted open-source models on internal GPU infrastructure, no inference call leaves the perimeter. RPA agents in each office, orchestrated centrally. Cloud frontier model allowed only for non-sensitive, non-customer-data workloads, with explicit audit trail. Expect a 12–24-month rollout, an internal AI governance committee, and a written model registry.

Enterprise & worldwide (multinational SaaS, global manufacturer, payments)

Region-sharded sovereign-cloud deployment, EU runs in EU (Anthropic on AWS Frankfurt, or sovereign provider), US in US, APAC in APAC. Central policy plane, per-region runtime. BYOIP across all egress, with a dedicated email reputation team. Multi-vendor LLM abstraction so a single provider's outage doesn't shut down global ops. Most expensive pattern, and the only one that survives a Tier-1 audit.

§7 · The verdict, pick by job, not by company

Don't pick local or cloud. Pick by job.

The hybrid story isn't a transition. It's the destination. The teams that win in 2026 are the ones who treat "where the agent runs" as a first-class architectural decision, not an afterthought that surfaces the day Cloudflare starts blocking their traffic, the regulator asks where the data went, or the AWS bill triples.

Decision matrix, workload to deployment

The three-sentence rule

If you remember nothing else from this whole series, remember this:

  1. Cloud agents are cheap until they're not. They scale onboarding and quality; they break on reputation, sovereignty, and unit cost.
  2. Local agents are clean until they're loud. They scale privacy and latency; they break on availability, ISP policy, and shared-IP pile-ups.
  3. Hybrid isn't a phase, it's the answer. Different layers, software, network, infrastructure, can live in different places. The mix is the design.
If your agent talks to the outside world, where it ships from matters as much as what it says. If your agent talks to inside the building, where it ships from is the only thing that matters.

We opened Part 1 with a question, most teams pick where their agents run by accident. The teams that stop picking by accident, and start picking per workload, are the ones whose Q3 numbers don't quietly collapse.

Thanks for following the series. If any single piece changed how you think about a workload you're shipping right now, that was the whole point. The agents that win in 2026 aren't the smartest, they're the ones deployed in the right place, on the right network, for the right job.


Sources across the series

  • Grand View Research, AI Agents Market Report (2026)
  • Gartner, Enterprise AI Agent Adoption Forecast (Aug 2025)
  • Zenity, Enterprise AI Agent Security Report (2026)
  • Cloud Security Alliance, State of Cloud & AI Security (Mar 2026)
  • Smartlead / Landbase, AI SDR Benchmark Data (2026)
  • Cloudflare, Bot Detection Architecture (2026 update)
  • Anthropic, Managed Agents Pricing (Apr 2026)
  • Prelude Security, Local AI Agent Risk Inventory (2026)
  • NVIDIA Research, "Small Language Models Are the Future of Agentic AI" (2025)
  • HuggingFace, Open-Weight Model Hardware Requirements (2026)

Frequently asked questions

Should AI agents run locally or in the cloud?

It depends on the workload. Customer-facing applications often benefit from cloud infrastructure, while sensitive, regulated, or latency-critical workloads may be better suited to local or hybrid deployments.

What is the best deployment model for most companies?

For most organizations, a hybrid approach offers the best balance of performance, security, compliance, cost, and operational flexibility.

Which workloads are best suited for cloud AI agents?

Customer support, managed RAG systems, and applications that require elastic scaling and access to frontier models are often best deployed in the cloud.

Which workloads are best suited for local AI agents?

Coding assistants, regulated workloads, internal automation, and latency-sensitive applications often benefit from local or on-premises deployment.

Why is hybrid AI becoming the standard?

Hybrid architectures allow organizations to combine cloud scalability and advanced models with local control, compliance, privacy, and performance where needed.

What is the key takeaway from the local vs. cloud debate?

Choose deployment based on the job the agent needs to perform, not on a company-wide preference for local or cloud infrastructure.

About the author

Accountable access for agents.

Metro Fabric gives every agent a verifiable identity and a signed access record, wherever it runs.

Join the waitlist