In the event your application requires your clients to enter their info on their own devices, Then you certainly qualify for SAQ A. Dealing with the entry of bank card data from customers; specifically, that sensitive card information are gathered and transmitted securely Identify people and authenticate entry to technique https://www.nathanlabsadvisory.com/blog/nathan/benefits-of-hipaa-compliance-certification-for-us-professionals/