Only necessary and relevant personal data is processed, never more than the law authorises or the purpose requires, and data is kept complete, accurate, up to date and not misleading for its purpose.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.