If your application requires your shoppers to enter their information on their own personal equipment, Then you definately qualify for SAQ A. SOC two is surely an auditing technique that makes sure your service vendors securely regulate your information to shield the interests of your organization along with the privateness https://www.nathanlabsadvisory.com/blog/nathan/achieve-pci-dss-compliance-in-the-usa-secure-your-business-today/