Your vendor review asks where the data lives. It doesn't ask what the agent can do.