Even if a company must bear contractual liability to a supplier, it can still seek indemnification from the platform, technology supplier, or responsible party based on the procurement system contract, technical service agreement, employee management rules, or cybersecurity incident liability.