How do you manage third-party vendors and services?

Third-party vendors are evaluated on function, data handled, reliability, contract terms, API availability, security, and dependencies. We avoid building an architecture that invisibly depends on a service we can't control, and we document costs and limits external to the SqualiOnline project.