A subprocessor is usually a fourth party in practice, since it's a company your vendor uses to help deliver a service, most often around data processing. Not every fourth party gets labelled a subprocessor, though. That term comes specifically from data protection agreements rather than general vendor risk language.
FAQ
Fourth-Party Risk