Finally, if third parties, such as your customers or other vendors, will access the data or application, you need to be sure that the agreements with those third parties governing their access reflect the relevant terms of your agreement with the service provider.