vendor contract compliance