If the application needs your clients to enter their info on their own devices, Then you certainly qualify for SAQ A. Large-quantity consumers will want to secure the services of a QSA that's registered to work in regions where you are functioning. A SOC 2 evaluation can be a report https://www.nathanlabsadvisory.com/copyright-certified-information-system-security-professional.html