If The application demands your buyers to enter their information on their own individual products, Then you really qualify for SAQ A. The GDPR safeguards personal data whatever the technological know-how used for processing that facts. It really is technology neutral and relates to both equally automatic and guide processing, https://www.nathanlabsadvisory.com/blog/author/nathan/page/2/