All data stored or processed for DoD must reside in facilities under exclusive US legal jurisdiction; data held off DoD premises stays inside the United States (the 50 states, DC and the FAR 2.101 outlying areas) unless the responsible AO authorises otherwise and the contracting officer notifies the contractor in writing. The CSP hands the agency a list of every physical site that might hold the data at any moment and keeps it current as locations are added. DoD off-premises, on-premises and virtually on-premises arrangements are distinguished for this purpose.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.