they are responsible for it, but it's useful in reporting to differentiate between "fulfilled by" and "bought through"