In case your application requires your prospects to enter their information on their own individual equipment, Then you certainly qualify for SAQ A. Higher-quantity customers will want to safe the services of the QSA who's registered to operate in locations in which you are running. It's relevant to all organizations https://www.nathanlabsadvisory.com/blog/tag/sama-cybersecurity-framework/