non-vendor third parties