The controller is responsible for disclosing the data subject's data to the processor, the recipient or persons they authorise, within the limits of their powers and consistent with the nature of their duties, and the security, technical and organisational measures of those persons must comply with the applicable safeguards and instructions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.