When the payment software stores, processes, or transmits account data, additional controls must protect the data including encryption, tokenization, masking, and minimization across all software components.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.