Controllers that jointly determine purposes and means must set out their respective responsibilities, particularly for data subject rights and Articles 14 and 15 information, in an arrangement reflecting their roles, unless a law determines them; the arrangement may name a contact point, its essence must be available to data subjects, and data subjects may exercise their rights against each controller.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.