Should your application calls for your buyers to enter their info on their own individual devices, You then qualify for SAQ A. Higher-volume users will would like to secure the services of a QSA that's registered to function in locations where you are operating. Be aware- the more TSC categories https://www.nathanlabsadvisory.com/blog/tag/dpias/