A deployer with fewer than 50 full-time employees that does not use its own data to train the high-risk AI system, and that meets the other statutory conditions, is exempted from the risk-management-program, impact-assessment and public-statement duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.