A controller remains accountable for personal data under its control without regard to where the data is located. Moving processing offshore, to a cloud region or to an affiliate does not move the accountability, so the controller keeps contractual and technical hold over the data wherever it goes.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.