Personal Vault stores file metadata on the app host and file bytes in a private object bucket. v1 does not use client-side end-to-end encryption.