Per Qatar Law No. 13 of 2016 on Personal Data Privacy Protection: cross-border + processor. Requirements include (a) transfer restrictions + (b) processor agreements + (c) cross-border safeguards + (d) inventory + (e) supplier due diligence.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.