First and third parties

No company does everything itself. A distributor buys its products from manufacturers, moves them with carriers, runs its books on software someone else wrote, takes card payments through a processor, calculates tax with an outside engine and calls a partner when the ERP misbehaves. Each of those relationships saves time or money, and each one moves part of your business into someone else's hands.

We wrote this section for owners and project leads. It starts with what first party and third party mean and how to decide between doing something yourself, buying it or hiring it done. It then covers choosing and contracting a vendor, security and risk, running the relationship once it is live and leaving without losing your data or your customers. It is vendor neutral and names categories and public standards, never products.

The table points common questions to the page that answers them.

If you are asking	Start with
What counts as first party, third party or fourth party?	First party and third party, explained
Should we build it, buy it or hire someone?	Build, buy or partner
Which outside businesses does a distributor depend on?	The third-party landscape for distributors
How do we pick between vendors?	Choosing a vendor
What should we look for in the contract?	Contracts, SLAs and data rights
How much vendor risk process do we need?	Third-party risk management
How do we get out of a vendor relationship?	Leaving a vendor

We are a third party too

Lumina ERP is a consultancy, which makes us one of the outside businesses these pages teach you to evaluate. We have tried to write the advice we would give if we had nothing to sell, including how to judge and leave firms like ours.

Every page in this section

1. First party and third party, explainedWhat first, third and fourth party mean for suppliers, software, data, support and cloud, and why the label decides who is accountable when something breaks.Explanation · Introductory · 10 min read
2. Build, buy or partnerDecide whether to do a job yourself, buy a product or hire a service, using core versus context, five-year total cost of ownership and a weighted matrix.How-to · Intermediate · 10 min read
3. The third-party landscape for distributorsMap of the outside businesses a wholesale distributor relies on, what data each touches, what breaks when it fails, typical contracts and what to ask.Reference · Introductory · 11 min read
4. Lessons from other industriesHow banking, healthcare, automotive, retail, cloud, government, defense, food and pharma manage third parties, and which practices a distributor can borrow.Explanation · Introductory · 10 min read
5. Choosing a vendorA step-by-step vendor selection process, from must-haves and a long list through RFPs, scripted demos, reference calls, pilots, scoring and negotiation.How-to · Intermediate · 12 min read
6. Contracts, SLAs and data rightsWhat each vendor contract document covers, the clauses that decide cost, risk and your exit, why service credits are small and which terms to negotiate first.Explanation · Intermediate · 12 min read
7. Managing vendors after go-liveHow to run vendors after the contract is signed, with named owners, a vendor register, tiering, business reviews, KPIs, a renewal calendar and invoice audits.How-to · Intermediate · 11 min read
8. Leaving a vendorHow to exit a vendor cleanly, from planning at signature through notice, data extraction, parallel running, revoking access and data destruction.How-to · Intermediate · 12 min read
9. Third-party risk management for mid-sized companiesHow to run third-party risk management at a 50 to 500 person distributor, scaling the bank regulators' lifecycle and NIST CSF 2.0 to what you can sustain.Explanation · Intermediate · 11 min read
10. Security and data sharing with vendorsHow to judge a vendor's security evidence (SOC reports, ISO 27001, questionnaires) and control what you share, from vendor access and API keys to breaches.How-to · Intermediate · 14 min read
11. Fourth parties and concentration riskHow your vendors' vendors and shared dependencies can stop your business, with public incidents, a dependency mapping method and a tabletop exercise outline.Explanation · Advanced · 11 min read
12. Vendor due diligence checklistA due diligence checklist for choosing a vendor, grouped from financial health and security to insurance, exit rights and pricing, and scaled by tier.Checklist · Introductory · 11 min read
13. ERP add-ons and independent software vendorsWhen to use a native ERP feature, a third-party add-on, a custom extension or a connected system, what to check before buying and how to handle upgrades.Explanation · Intermediate · 10 min read
14. Choosing and working with implementation partners and consultantsHow to pick the right kind of ERP partner or consultant, choose a pricing model, write a statement of work and finish the work owning your system.How-to · Intermediate · 9 min read
15. Logistics providers, 3PLs and carriersHow in-house logistics compares with 3PLs and 4PLs, what carriers, brokers and forwarders do, how 3PLs price and where integration and liability gaps sit.Explanation · Intermediate · 10 min read
16. Outsourced business servicesWhat distributors commonly outsource, from accounting and payroll to IT, hosting, collections and staffing, and what must stay in house for each service.Explanation · Introductory · 8 min read
17. Selling through others, and being someone else's third partyHow distributors sell through reps, buying groups, marketplaces, drop ship and punchout, handle chargebacks and prepare for customer vendor risk reviews.Explanation · Intermediate · 9 min read