The controller and the processor must each keep a record of the personal data processing operations they carry out, especially where processing is based on legitimate interest. Small processing agents may keep the record in simplified form using the ANPD's model (Resolution CD/ANPD 2/2022, Art. 9).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.