Understandable controls
What the product does not assume.
Controls support a customer's security program but do not by themselves guarantee compliance. SCIM and service-account public pages are intentionally omitted because general availability is unconfirmed.