In the event your application needs your clients to enter their information on their particular equipment, You then qualify for SAQ A. Establish firewalls and router specifications, which established regulations for making it possible for and denying access to your methods. Firewall configurations should be reviewed bi-on a yearly basis https://www.nathanlabsadvisory.com/cybersecurity-fintechs.html