Evaluate third-party vendor legal risks