If Your application demands your clients to enter their info on their own personal devices, You then qualify for SAQ A. Use sturdy cryptography when transmitting cardholder data across open, public networks. These two necessities be sure that you protect info the two at relaxation As well as in movement. https://www.nathanlabsadvisory.com/blog/tag/best-practices/