Those are great questions. The gold is held in a vault in Singapore, which is audited regularly be a third party. It is also insured.
Singapore has been incredibly forward leaning in cryptocurrency and will be a friendly jurisdiction for Digix (and others) to operate in. Their crime rate is also very low.