Should your application demands your clients to enter their information on their very own products, Then you definitely qualify for SAQ A. The GDPR guards individual information regardless of the technological know-how employed for processing that facts. It really is technological know-how neutral and relates to both automated and handbook https://www.nathanlabsadvisory.com/blog/tag/compliance-assurance/