When your application calls for your customers to enter their information on their own personal gadgets, then you qualify for SAQ A. Critique requests and talk to any questions (pro tip- it’s important to pick an experienced auditing organization that’s capable to answer issues through the entire full audit process) https://www.nathanlabsadvisory.com/blog/nathan/navigating-the-seas-of-cybersecurity-a-guide-to-complying-with-monetary-authority-of-singapore-mas-cyber-hygiene-guidelines/