An MCDA puts in place measures to retrieve its data and application artefacts and to have the provider delete all its data, derived data named in the contract included, once an agreed period has passed; it makes sure a right to be forgotten operates so that once it signals that use of the service will cease there is an orderly process to retrieve its data and artefacts and the provider deletes every copy and retains nothing of the MCDA's after the agreed period.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.