If your application needs your buyers to enter their info on their own products, then you qualify for SAQ A. The GDPR guards individual facts regardless of the technology employed for processing that info. It is actually technology neutral and applies to the two automatic and guide processing, presented the https://www.nathanlabsadvisory.com/blog/category/nathan/page/3/