If the application calls for your consumers to enter their information on their own individual devices, You then qualify for SAQ A. Your company is service supplier primarily based outside the EU. It offers services to customers exterior the EU. Its purchasers can use its services every time they vacation https://www.nathanlabsadvisory.com/blog/nathan/how-to-achieve-pci-dss-compliance-certification-in-the-usa-quickly/