Sounds like you're trying to dodge the question a bit here, but this is a real yes or no question, that I will rephrase: Is my data sent to any unidentified partner that is not listed explicitly on the contract ? I understand that, as a cloud based solution, it is sent outside my network, but can you guarantee (and write down) that no other third party will have any access to it, even partially ?

If you can not answer with a firm YES here, and have to lawyer wriggle out your answer, then this is a non starter.

Edit: formatting