If the application requires your shoppers to enter their info on their own equipment, Then you definitely qualify for SAQ A. Your organization is service provider centered outside the house the EU. It offers services to buyers outside the EU. Its clientele can use its services whenever they travel to https://www.nathanlabsadvisory.com/blog/nathan/achieving-soc-2-compliance-a-crucial-step-towards-data-security/