Where tokenisation is used to reduce the amount of data, above all sensitive data, shared with the provider and to limit access to authorised parties, the company assesses the risks carefully, in particular those of the tokenisation solution itself, identifies the unique attributes used to reach the data, and makes sure the provider cannot recover tokenised data through access to the tokenisation system.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.