vendor regulation