Advanced control principles for data protection (required, with baseline and intermediate, of an AI whose inherent risk is high). Confidential data and applications on mobile devices are reachable only through a secure isolated sandbox or container; confidential data is encrypted in transit over private connections and inside trusted zones; data classification and risk assessment policies set criteria for encrypting selected data at rest.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.