What change control processes are in place related to patches, hotfixes, upgrades, config changes etc.?
All code changes are reviewed (peer-review) and once they are accepted, they are pushed into testing. Our testing manager has to approve them and sign-off before they are pushed into production. Our release cycle is 2 weeks. Testing follows a weekly schedule. Deployment is automatic as it does not require a separate step. Emergency changes are performed manually and usually take less than 24 hours.
Are there any third party relationships which affect this product or service (e.g. development, administration, hosting, consulting, etc.)?
Hosting is outsourced to Azure. Everything else is in-house.