In case your application requires your customers to enter their info on their unique devices, Then you definately qualify for SAQ A. Making sure that this laws is used persistently, nationwide and European details protection authorities and bodies are established. Detect users and authenticate access to system components. Not just https://www.nathanlabsadvisory.com/blog/author/nathan/page/3/