In case your application involves your consumers to enter their info on their own gadgets, You then qualify for SAQ A. PCI DSS compliance is the process of adhering to the set of controls and expectations for securing physical and on line economic transactions. Take note- the greater TSC categories https://www.nathanlabsadvisory.com/copyright-certified-information-system-security-professional.html