Where is the data stored, and is the off-chain data-storage corruptible?

Using IPFS as an example, we have control of the nodes on our servers or servers we are hosting for developers and we choose an aggressive level for pinning the data (ipfs-cluster) so IPFS can be made fault tolerant. We can verify data and ensure redundancy.