The body must keep records that demonstrate that all certification process requirements, both those in the standard and those in the scheme, have been effectively fulfilled. Records must stay confidential, and must travel, be sent and be handed over in a manner that preserves confidentiality. Where the scheme involves a complete re-evaluation of products within a defined cycle, records must be kept for at least the current and the previous cycle. In other cases the body defines the retention period. The body may take account of legal duties and recognition deals when it sets the period.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.