In case your application necessitates your customers to enter their information on their own products, Then you really qualify for SAQ A. Formally attest your compliance. An AOC (attestation of compliance) is the shape you use to sign you’ve obtained PCI DSS compliance. Ending your questionnaire with no “wrong” responses https://www.nathanlabsadvisory.com/data-protection-officer-service-virtual-dpo.html