Should Your application involves your customers to enter their information on their own individual devices, Then you certainly qualify for SAQ A. This enables all companies—from substantial businesses to startups and little and medium enterprises, which can not have the requisite security infrastructure and team—to remain guarded and PCI DSS https://www.nathanlabsadvisory.com/blog/tag/cybersecurity-requirements/