A public provider completes the Annex A disclosure for each distinct cloud service, marking items it cannot or will not disclose with a remark, so customers can compare offerings on legal and compliance terms, data control, provider performance, service support, security configuration and elasticity. The completed form is signed by the provider and by the certification body's lead auditor and made available to customers.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.