Exchange-to-exchange transactions are currently on-chain, but the travel rule ID details will be in a secure channel
Separately, some exchanges are probably planning to move some transactions off-chain, between trusted exchanges, with periodic on-chain settlement transactions