If The application involves your prospects to enter their info on their own personal equipment, Then you really qualify for SAQ A. SOC two is definitely an auditing treatment that ensures your service suppliers securely take care of your information to protect the pursuits of one's organization and the privateness https://www.nathanlabsadvisory.com/blog/nathan/achieve-fisma-compliance-in-the-usa-avoid-risks-and-stay-secure/