The processor has a policy covering the return, transfer and disposal of PII and makes it available to the cloud service customer. 2019 guidance, not confirmed for this edition: disposal options, erasure by processor and sub-contractors including backups once no longer needed, disposal methods fixed by contract, and a post-termination retention period protecting against an accidental lapse. See the official text for the full requirement.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.