If the application needs your prospects to enter their info on their very own products, Then you certainly qualify for SAQ A. Dealing with the entry of credit card facts from prospects; namely, that sensitive card information are gathered and transmitted securely These Thoughts and Solutions are based upon comments https://www.nathanlabsadvisory.com/eu-us-privacy-shield-gdpr.html