The supervisory authority under GDPR Art. 51 is the Croatian Personal Data Protection Agency (AZOP), an independent state body answerable to the Croatian Parliament, seated in Zagreb.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.