Do you perform third-party security audits / due diligence checks on the companies you collaborate with?

We currently don't have a need to do third-party audits. The one subprocessor we have (DigitalOcean) has certification reports proving it's secure to work with them.