If you are not using the bulkapi, then data is pulled from the linked server set up on the DBAmp-server, and pushed directly to the remote server - it never rests on the DBAmp-server. For the bulkapi, as with non-remote usage of DBAmp, the data is first pulled into temporary CSV files in the DBAmp Work Directory on the DBAmp-server, but then the data is pushed from there directly into the remote server, and the temporary files are subsequently cleaned up.

The connection between the DBAmp-server and the remote server works through TLS 1.2.