Yes to both. Workato's platform runs in our cloud, and we extend that to your on-prem systems through our On-Prem Agent (OPA): it sits inside your data center and opens a secure outbound connection to Workato, so on-prem databases, file systems, and legacy apps like SAP participate in your automations without opening inbound firewall ports. For global and data-residency needs, Workato operates a global data center footprint, including in-region processing for data-residency-sensitive workloads, plus Virtual Private Workato for dedicated, isolated deployments where required.