## Managed vs Self-Hosted Accounts

Nuggets offers two types of account setups: **Managed Accounts** and **Self-Hosted Accounts**.

### Self-Hosted Accounts

Self-Hosted accounts represent the gold standard in privacy and security. However, this level of protection comes with increased integration complexity. With a Self-Hosted setup, your application communicates directly with the user’s environment. All data is **end-to-end encrypted**, and **Nuggets never has access to raw user data** at any point.

### Managed Accounts

Many of the technologies behind Nuggets are cutting-edge and unique to our platform. To simplify adoption, we offer **Managed Accounts**, which abstract away most of the technical complexity. In a Managed setup:

- The **Nuggets Platform runs the provider service** on your behalf.
- This service **processes user data and returns it to your application via OIDC**.

To ensure privacy and security, we take the following precautions:

- The provider service operates in a **Confidential Compute environment**, so even Nuggets cannot access the data being processed.
- **No user data is logged or stored** — only minimal, essential information is retained for monitoring and performance.
- [**Encryption keys are protected using Hardware Security Modules (HSM).**](https://en.wikipedia.org/wiki/Hardware_security_module)

### Which Should You Choose?

If your application requires maximum control and end-to-end privacy, a Self-Hosted account may be the best fit.

> If you’re interested in setting up a Self-Hosted account:

[Contact Us](mailto:contact@nuggets.life)