Where is the fiat and crypto stored?

Fiat is escrowed in the Plutus partner bank account(s). Funds from here are then released directly to your Plutus account once the transaction is confirmed on the blockchain.

Plutus does not hold any digital currencies. Instead, they are transferred to users directly. This is by design and makes Plutus resistant to attacks.