Agencies must identify every location where data they use alongside a public cloud service is held or processed, covering any replicas or backups that might be created.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.