If your company operates in the US and uses a provider, who does not implement sanctions, does it have to enforce them on its own?

I mean, something like selling a product, maybe based on open source tech in the US and cooperating with devs in sanctioned countries via a workaround provider..