In the event your application necessitates your clients to enter their information on their unique gadgets, You then qualify for SAQ A. The GDPR protects individual knowledge whatever the technological innovation used for processing that information. It is actually know-how neutral and applies to the two automated and handbook processing, https://www.nathanlabsadvisory.com/blog/nathan/unmasking-red-teaming-a-strategic-approach-to-enhancing-security/