Where is the fiat and crypto stored?

Fiat is escrowed and insured in the Plutus bank account(s). Funds from here are then released directly to your bank account once the trade is confirmed on the blockchain.

Plutus does not hold any digital currencies. Instead, they are transferred to users directly. This is by design and makes Plutus resistant to attacks.