In the event your application involves your consumers to enter their information on their unique equipment, then you qualify for SAQ A. Formally attest your compliance. An AOC (attestation of compliance) is the form you use to signal you’ve realized PCI DSS compliance. Finishing your questionnaire without having “Improper” answers https://www.nathanlabsadvisory.com/iso-22301-business-continuity.html