Should your application demands your prospects to enter their info on their very own units, Then you certainly qualify for SAQ A. The data defense authorities, Functioning with each other in the ecu Info Protection Board, should really be certain that the information safety principles during the EU are used https://www.nathanlabsadvisory.com/blog/nathan/building-an-effective-incident-response-team-roles-and-responsibilities/