A quick follow-up. I see that they have much more information on their security page than when I had looked before. It looks like you can back up to your own Amazon S3 account. But it's not clear if that all happens directly from your server or if it passes through their own on the way. The description makes me think it goes through their servers first.