When your application needs your prospects to enter their information on their own personal gadgets, Then you definately qualify for SAQ A. SOC two can be a security framework that specifies how companies ought to secure consumer knowledge from unauthorized obtain, security incidents, together with other vulnerabilities. Stripe.js v2 SAQ https://www.nathanlabsadvisory.com/blog/nathan/understanding-soc-2-a-guide-to-compliance-and-reporting/