CMI partners, content providers and resellers among them, should use compliant cloud services to deliver their products and services; their responsibility as subscribers is governed by their contractual obligations with the CMI, by contractual compliance audits performed by an authorised CMI auditor, and by their full accountability for any of their services that support the provider.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.