When Your application needs your consumers to enter their information on their very own products, Then you definately qualify for SAQ A. Higher-volume end users will wish to safe the services of the QSA who is registered to operate in areas where you are working. PCI DSS fines can vary https://www.nathanlabsadvisory.com/blog/tag/security-awareness/