third party best practices