In case your application calls for your consumers to enter their information on their unique units, You then qualify for SAQ A. Nth-occasion vendors: 3rd-party sellers may perhaps them selves attain code from exterior libraries. Partners’ dependence on other partners for JavaScript code could be undisclosed, lengthening the software supply https://www.nathanlabsadvisory.com/blog/nathan/understanding-the-sama-cybersecurity-framework-requirements-and-implementation/