If your application involves your prospects to enter their info on their particular equipment, Then you certainly qualify for SAQ A. Assessment requests and request any thoughts (pro idea- it’s imperative that you pick out a skilled auditing business that’s capable to reply questions through the entire entire audit system) https://www.nathanlabsadvisory.com/blog/nathan/understanding-the-sama-cybersecurity-framework-requirements-and-implementation/