We perform rigorous due diligence of our partners and vendors and require them to contractually adhere to appropriate information security and privacy obligations—particularly if they will be handling our customers’ data.