Article 242 of the 2023 NEC describes where each SPD type can be installed…
242.13 Type 1 SPDs
Type 1 SPDs shall be installed in accordance with 242.13(A) and (B).
(A) Installation
Type 1 SPDs shall be permitted to be connected in accordance with one of the following:
•(1) To the supply side of the service disconnect as permitted in 230.82(4)
•(2) As specified in 242.14
(B) At the Service
When installed at services, Type 1 SPDs shall be connected to one of the following:
•(1) Grounded service conductor
•(2) Grounding electrode conductor
•(3) Grounding electrode for the service
•(4) Equipment grounding terminal in the service equipment
242.14 Type 2 SPDs
Type 2 SPDs shall be installed in accordance with 242.14(A) through (C).
(A) Service-Supplied Building or Structure
Type 2 SPDs shall be connected anywhere on the load side of a service disconnect overcurrent device required in 230.91 unless installed in accordance with 230.82(8).
(B) Feeder-Supplied Building or Structure
Type 2 SPDs shall be connected at the building or structure anywhere on the load side of the first overcurrent device at the building or structure.
(C) Separately Derived System
The SPD shall be connected on the load side of the first overcurrent device in a separately derived system.
242.16 Type 3 SPDs
Type 3 SPDs shall be permitted to be installed on the load side of branch-circuit overcurrent protection up to the equipment served. If included in the manufacturer’s instructions, the Type 3 SPD connection shall be a minimum 10 m (30 ft) of conductor distance from the service or separately derived system disconnect.