If someone needs to complete a third-party risk assessment once or twice a year, do they need to be a licensed user?

No. Risk assessments sent via survey do not require users to log into Onspring software. Your vendors and contractors simply complete an online survey through a link sent via email. No login is required and all data submitted remains confidential in Onspring.