In the event your application demands your customers to enter their info on their own individual devices, then you qualify for SAQ A. The difference between the different types of SOC audits lies in the scope and period with the evaluation: These Queries and Answers are determined by opinions acquired https://www.nathanlabsadvisory.com/blog/tag/cybersecurity/