The controller must keep records documenting the data transferred to or exchanged with the recipient and the purpose, and documenting the data subjects' consents to the transfer.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.