If the application necessitates your customers to enter their info on their own individual devices, Then you really qualify for SAQ A. SOC 2 is often a security framework that specifies how companies need to guard customer details from unauthorized access, security incidents, and also other vulnerabilities. PCI DSS fines https://www.nathanlabsadvisory.com/mobile-app-development.html