I hope you have a gating process in your finance team which halts the ability to pay vendors without security approval.  Otherwise, you will end up with 3rd party cloud vendors who have a risky portion of your intellectual property without you noticing.  Much akin to cloud cat....