If the application requires your customers to enter their information on their very own units, Then you definitely qualify for SAQ A. Your company is service company dependent outside the house the EU. It offers services to shoppers outdoors the EU. Its clients can use its services after they journey https://www.nathanlabsadvisory.com/blog/nathan/implementing-iso-27001-at-nathan-lab-advisory-company-a-comprehensive-guide/