Where confidentiality is claimed for information obtained by the submitter from a third party, such as a supplier, the submitter is responsible for obtaining from the third party the information that is necessary to comply with § 512.4 of this part, including a certificate in the form set out in appendix A to this Part.
49 C.F.R. §512.9