In case your application calls for your consumers to enter their info on their own personal products, You then qualify for SAQ A. The difference between the differing types of SOC audits lies in the scope and duration in the assessment: He is also the creator of over a dozen https://www.nathanlabsadvisory.com/blog/tag/gdpr-compliance/