System installation and storage of all data (including personally identifiable information) can be discussed and specified with the client.
All data can be located on premises specified by the client.