Data is stored on Swedish servers. Aunetic is ISO 27001 certified, and the system has been penetration tested by a third party, with daily backups, encrypted data, permission controls, and MFA login.