verify supplier legitimacy