A B/D keeps full visibility of where its content is stored and transacted for data at rest, in transit and in backup, and obtains provider commitments that sensitive information, personal information above all, will not move to other regions without its consent. It also prevents government data moving to the cloud without prior approval, by monitoring large internal data movements with database and file activity monitoring or by watching outbound movement through URL filters and data loss prevention tooling.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.