It's run in the Databricks 'control plane', not within a particular cluster, and not within the customer's account. Databricks manages it and the metadata it stores, but artifact data is still stored in DBFS and thus in the customer's storage account.