In case your application necessitates your customers to enter their info on their unique devices, Then you really qualify for SAQ A. SOC 2 can be a security framework that specifies how businesses really should secure purchaser data from unauthorized access, security incidents, and other vulnerabilities. Stripe.js v2 SAQ A-EP https://www.nathanlabsadvisory.com/nist-800-cyber-security-frame-work.html