Should your application requires your consumers to enter their info on their own gadgets, then you qualify for SAQ A. This allows all companies—from huge businesses to startups and compact and medium enterprises, which may not provide the requisite security infrastructure and staff—to remain secured and PCI DSS compliant. He https://www.nathanlabsadvisory.com/hitrust.html