If your application demands your buyers to enter their info on their particular products, You then qualify for SAQ A. The information security authorities, Functioning alongside one another in the eu Info Defense Board, need to be sure that the info safety rules while in the EU are applied in https://www.nathanlabsadvisory.com/blog/tag/data-protection-impact-assessments/