In The event your application necessitates your prospects to enter their info on their own personal gadgets, Then you really qualify for SAQ A. The data security authorities, working with each other in the eu Knowledge Defense Board, really should make sure the information protection policies while in the EU https://www.nathanlabsadvisory.com/blog/nathan/vapt-solutions-in-uae-enhancing-cybersecurity-and-resilience-for-businesses/