Sean has a good start here. Even in a 17025 accredited lab not everything has to meet 17025 requirements - only the things that can affect your results.Records are useful to show that "externally provided products and services conform to the laboratory’s established requirements, ... before they are used". So, basically you need to well define your "established requirements", then your vendors/purchased products will be checked/approved against these requirements. Who/What/How will be recorded/kept. It seems to me that you do not have such an SOP in place. Maybe not everything you purchase (paper towels?), but at least the materials that impact your test results (you may use risk-based approach to decide which ones need to be monitored). For pipette tips, are you using non-sterile or sterile? (what do you want?). How are your vendors evaluated/approved/rejected?
"If you don't know where you're going, any road will take you there." Alice in Wonderland.
Your organization need to develop and document a list of the products you purchase that can affect results. You need to document the critical qualities of these products to your products or processes. These are the items where you have to document a process on how to determine that the product is adequate. That could come down to checking whatever certification comes with the product to see if this is the correct product, correct strength, within expiry date, etc.
Retaining records for these checks can be as simple as having an authorized person review the documents and date and sign them as being reviewed and approved, then filing them.