Should your application involves your clients to enter their information on their particular products, Then you definately qualify for SAQ A. This permits all organizations—from big firms to startups and small and medium enterprises, which may not possess the requisite security infrastructure and staff—to remain protected and PCI DSS compliant. https://www.nathanlabsadvisory.com/fair-risk-assessment.html