In case your application calls for your consumers to enter their information on their unique equipment, Then you certainly qualify for SAQ A. Large-volume people will choose to secure the services of the QSA who's registered to work in regions in which you are running. Recognize people and authenticate use https://www.nathanlabsadvisory.com/blog/nathan/stay-ahead-with-effective-web-application-security-testing-strategies/