Stored procedures and transactions are stored on the database, (so much for my 'more secure'), They actually are, as you must have access to the database server in order to access them, this is just one reason why the database server for such information is regarded as something that must be separate and not shared in any way with the normal 'open' to the public hosted http/shared-database servers