DEA regulations generally specify security performance and installation requirements rather than granting a universal approval to every model marketed as a DEA vault. A suitable solution must be assessed against the applicable provisions, including 21 CFR 1301.72 or 1301.75, as relevant, and any agency-specific direction.