In some cases, it is because the vendor is identified as a covered entity, and if that is the case, they will provide you evidence so you can update their status. Yet in some cases it is for a very different reason, one that needs serious consideration by your Compliance Officer. Check out the help desk question from this week that addresses this issue.