In case your application needs your shoppers to enter their info on their own personal products, Then you definitely qualify for SAQ A. Formally attest your compliance. An AOC (attestation of compliance) is the form you utilize to sign you’ve realized PCI DSS compliance. Ending your questionnaire without “Completely wrong” https://www.nathanlabsadvisory.com/blog/tag/cybersecurity-recruitment/