The organisation explains how its safeguards are proportional to the likelihood and severity of the harm threatened, the sensitivity of the information (collected directly or via third parties) and the context in which it is held, and the Accountability Agent verifies that proportionality. Requirement 28 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.