Processes, procedures, controls, roles and responsibilities for lifecycle management span both on-premises and cloud; every data asset is mapped to a retention schedule and its applicable lifecycle stage (creation or acquisition, processing, persistence, maintenance, distribution, consumption, archiving, disposal, destruction); the minimum lifecycle metadata required by law, regulation, contract and internal policy is collected; controls answer e-discovery requests promptly and their effectiveness is demonstrated; and metadata-driven systems dispose of data, remove it from operational use or destroy it beyond forensic recovery. Legal holds and preservation orders protect data from deletion until lifted, earlier document versions receive the same protection, archives meet requirements such as write-once storage where regulation demands, over-retained data is reviewed and disposed of before migration rather than moved, and cloud roles are trained on disposal, holds and schedules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.