If your application requires your buyers to enter their information on their particular products, then you qualify for SAQ A. Set up firewalls and router requirements, which set regulations for making it possible for and denying use of your systems. Firewall configurations need to be reviewed bi-on a yearly basis https://www.nathanlabsadvisory.com/cloud-computing-security.html