The processor keeps a record of processing activities covering the processing categories performed for each controller, the controller's contact details and DPO, the period, restrictions and scope of processing, the deletion and modification mechanisms and the technical and organisational security procedures; provides the means to prove compliance on the controller's request and enables the Centre's inspection; holds a licence or permit from the Centre; and, if outside Egypt, appoints a representative in Egypt. Where several processors act, each bears every obligation unless an agreement clearly allocates them.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.