Legible records are established and retained to demonstrate fulfilment of the standard, with controls for their identification, storage, protection, backup, archiving, retrieval, retention time and disposal; records are retained for a period consistent with contractual obligations, access is consistent with confidentiality commitments, and records are readily available. Technical records carry the further requirements of 7.5.1.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.