Contracts state that all non-personal data entered by the MCDA remains the exclusive property of the Government of Kenya, its systems or affiliates into the provider's solution in every form, online, backup and archive included; carry the standard intellectual property clauses relevant to the service; state explicitly that data location is in Kenya; require compliance with the Data Protection Act; and include service level agreements that satisfy the requirements for availability, performance and disaster recovery.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.