@polaris
Off the top of my head, if you're talking about scripting a form (SuiteLet) I think you can assign the script to the Vendor Centre.
In the absence of any other more informed replies, maybe look at that route?
I know in the past for a customer I created a Scripted Form with various details including file browser buttons with image file upload options and exposed that to Vendors.
You just need to be mindful of the access limitations Vendors have.
I recall having to create a custom record and then process those to update/create the "real" records as an example.