If your application requires your clients to enter their info on their own equipment, Then you really qualify for SAQ A. Go with a compliance automation software tool to save time and price. Pro suggestion- decide on a accredited CPA firm that also provides compliance automation software for an all-in-1 https://www.nathanlabsadvisory.com/blog/tag/incident-response/