What you need is controls over access and a way to ensure the box is removed from inventory so that it can't be mistakenly rented. The contract is probably superfluous, but if it becomes the frame on which the access list is placed, there's certainly no harm.
John S. Burnett
Fighting for Compliance since 1976
Bankers' Threads User #8