> ## Documentation Index
> Fetch the complete documentation index at: https://ona.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Architecture Overview

> How the management plane and runners work together to keep your code secure while providing a consistent development experience.

Ona uses a two-plane architecture that separates coordination from execution. This page explains what each plane does, why they're separated, and what data flows between them.

## Two planes

### Management Plane

Hosted by Ona. Handles coordination, identity, and configuration:

* Authentication and identity
* Organization management
* Guardrail enforcement
* Runner coordination
* Dashboard and API

### Runners

Run in your own infrastructure ([AWS](https://ona.com/docs/ona/runners/aws/overview.md), [GCP](https://ona.com/docs/ona/runners/gcp/overview.md)). Handle everything that touches your code:

* Environment provisioning
* Source code access
* Secret injection
* Agent execution
* Build and test execution

## Why the split

The separation exists for three reasons:

**Data sovereignty.** Your source code and SCM credentials are handled by runners, not the management plane. With a runner in your VPC, all sensitive assets stay in your infrastructure.

**Compliance.** Audit logs track every action. Guardrails are defined centrally and enforced at the runner level. The management plane sets the rules; runners enforce them during execution.

**Flexibility.** You can deploy runners in different regions and cloud providers. Each runner can have different environment classes with different compute specs. The management plane coordinates across all of them.

## Data flow

The diagram below shows what stays in each plane:

![Data flow between planes](https://mintcdn.com/gitpod-13c83c2b/qBniPNCSoCrW-zJ5/images/understanding/data-flow.svg?fit=max\&auto=format\&n=qBniPNCSoCrW-zJ5\&q=85\&s=81f94ce00b0f6be8b88066e49106f362)

## Next steps

* [Core components](https://ona.com/docs/ona/understanding/core-components.md): what each part of Ona does
* [Runners overview](https://ona.com/docs/ona/runners/overview.md): where your environments and agents execute
* [Guardrails](https://ona.com/docs/ona/guardrails/overview.md): configure guardrails and compliance controls


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.