vetting vendors