A controller is the natural or legal person that determines the purpose and means of processing personal data. A processor is a person that processes personal data on behalf of a controller. Role assignment governs which obligations apply.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.