The organisation has mechanisms with processors, agents, contractors and service providers processing personal information for it (internal guidelines or policies, contracts, sector law compliance, self-regulatory codes, others) to ensure its obligations to individuals are met, and each type is verified. Requirement 46 in the 50-requirement set certified against until 31 March 2027.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.