We use a preferred vendor list.

"How does a vendor get added to that list? Is there an exception process if there's a clear case for going outside it?"

"If we're not on the preferred list, can we build a case to be added? I've done this before — it usually comes down to demonstrating clear ROI over current options."

"Fair process. What would need to be true for an exception to be made? I want to know the bar so I can clear it."