All new vendors require agency approval