Control: the processor states and documents the countries where PII may be stored. Guidance: those countries, including any arising from sub-contracted processing, are made known to customers; where specific agreements govern international transfer, for example binding corporate rules, model contract clauses or cross-border privacy rules, those arrangements are named along with the countries or situations each one covers; and customers are told in good time of planned changes so they can object or end the contract.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.