Personal data may be transferred abroad only if the destination ensures an adequate level of protection or where contractual safeguards, binding corporate rules, or other approved mechanisms apply.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.