software as a service, namely, software to help customers assess and manage the ongoing risk of healthcare third-party vendors