Orchestrator Database Credentialing in Cloud Orchestrator Implementation

I know that UIpath integrates with CyberArk, or Azure Key vault, which we do not have. If we chose UIpath third option, the Orchestrator Database, using the Cloud based orchestrator, is this stored in the cloud? If so what can I specifically reference as the security around this?

You can use the azure directory to control user access to the Database or set up a firewall to limit access to the orchestrator database, anyway sensitive data like users passwords and assets are each logged into separate tables or databases and orchestrator logs these as encrypted strings so even if you log in to the DB you would not be able to see assets.