The institution and the provider agree in advance the locations in which data may be processed. Where processing happens elsewhere, the institution makes sure such cases are limited to processing of individual transactions initiated by its end users; that the provider promptly tells it the city and country of processing and the reason; and that it obtains assurance from the provider that the processing took place in a secure environment and that the data was permanently removed from that location and returned to an agreed location within a reasonable time.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.