In the event your application needs your consumers to enter their info on their very own devices, Then you definately qualify for SAQ A. SOC two is definitely an auditing treatment that makes sure your service companies securely handle your facts to protect the pursuits of the Group as well https://www.nathanlabsadvisory.com/pci-3ds.html