Third-Party ATS (Greenhouse/Ashby/Lever) Testing – In Scope?

Hi,

I'm testing a domain that has an application form on its careers page. The first-name field is reflected in the confirmation email, and I'd like to check whether this could be used for link injection.

However, the application form is handled by a third-party recruitment platform (e.g., Greenhouse, Ashby, or Lever).

Would testing this functionality be considered in scope, or would it be out of scope since the form is managed by a third party? I couldn't find any specific guidance on this scenario in the bug bounty program's scope description.

Thanks!