When you use SaaS products, auditing the code is not a service they offer. You have to rely on certifications from independent certifying organisations, etc.

Part of the goal is to establish an arms length relationship to lower legal liability.