Should your application needs your customers to enter their info on their own units, then you qualify for SAQ A. The information defense authorities, Doing work with each other in the European Knowledge Defense Board, ought to make certain that the info protection rules from the EU are applied in https://www.nathanlabsadvisory.com/blog/nathan/achieve-pci-dss-compliance-in-the-usa-secure-your-business-today/