If The application calls for your clients to enter their information on their very own equipment, Then you definitely qualify for SAQ A. Critique requests and inquire any thoughts (pro tip- it’s crucial that you choose a skilled auditing agency that’s capable to answer concerns through the entire whole audit https://www.nathanlabsadvisory.com/blog/nathan/mas-technology-risk-management-in-singapore-ensuring-cyber-hygiene-and-compliance/