I have a similar question. Last year we purchased new ESD monitoring equipment for our warehouse and this year the auditor is stating that we need to have this vendor on the approved supplier list and that they don't meet our criteria because we don't have a quality questionnaire as per our required set up criteria. We didn't get that information when we set them up originally because we considered them a "non-aviation" vendor because we are only using them to procure the ESD monitoring equipment and not material we are selling to our customers. I assume she is saying that they need to be on the ASL because it is something that we use in our processing center and could affect the conformity of the part but we were viewing it the other way being that they aren't supplying us product that we are selling to our customers.