If your application requires your consumers to enter their information on their own personal gadgets, Then you definately qualify for SAQ A. SOC 2 is an auditing course of action that assures your service companies securely take care of your information to safeguard the interests of the Firm as well https://www.nathanlabsadvisory.com/fedramp.html