If the application demands your consumers to enter their info on their very own products, then you qualify for SAQ A. Many rival insurance companies have adhered for the Code. Even though adhering is voluntary, the adherence to your Code can help in demonstrating compliance With all the GDPR. Notice- https://www.nathanlabsadvisory.com/blog/tag/vulnerability-assessment/