How to mitigate the risk of SaaS-to-SaaS apps