In an onboard Flash, and also on an HPA sector on the Hardrive, which is protected by the drive controller so you can't read it, unless you can bypass the controller using an external controller. Without that, you cannot decrypt the data on this bloody self encrypting hardrive (read my review)