Again, they may open their stack for use (APIs or whatever) but can you audit the code?