[pbardea]

Yep - it's the latter! You can self-host an instance of the OPA and configure your organization to point to that instance rather than the cloud hosted one. Our docs have a bit more detail: https://docs.superblocks.com/on-premise-agent/deployment