It depends on what type of solution a customer has. If Nodinite is installed on-premises then this is where the data is stored. If it is part of a managed service agreement, then whoever manages the managed service is storing the data according to mutual agreement.