The operator conducts due diligence on third parties (including software development kits, advertising networks and analytics providers) that have access to child PI to verify they support COPPA-compliant practices, and discloses such third parties and their data practices in the privacy policy and parental Direct Notice.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.