Regulated entities should maintain records sufficient to demonstrate compliance with the Act, including processing inventories, consent records, contracts, rights request logs, and policy versions.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.