Should Your application requires your clients to enter their info on their particular gadgets, then you qualify for SAQ A. Formally attest your compliance. An AOC (attestation of compliance) is the shape you employ to signal that you just’ve realized PCI DSS compliance. Ending your questionnaire without “Completely wrong” responses https://www.nathanlabsadvisory.com/pci-dss.html