Mobile equipment is configured so that, as the standard, no business information sits on the user's device (zero footprint); where a footprint near zero cannot yet be reached, the laptop, tablet, smartphone or other mobile device protects access through an access control mechanism that at the least encrypts the data, and remote deletion is available.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.