Should your application requires your clients to enter their information on their own personal gadgets, You then qualify for SAQ A. Features a new illustrative report Which might be utilised when performing and reporting on the SOC 2+ evaluation. He is also the creator of above a dozen cybersecurity classes, https://www.nathanlabsadvisory.com/blog/nathan/get-certified-in-data-privacy-compliance-in-saudi-arabia-secure-your-operations/