In practice, most suppliers test one vial per lot and report the result as lot homogeneity, which is sampling one item from one lot and extrapolating wildly.
A statement that "lot 20260412 complies with specifications" is meaningless without stating which vials from the lot were tested and how many there were.
The ICH Q3A and Q3B thresholds for reporting, identification and qualification of impurities are the framework the pharmaceutical industry works to, and they are worth reading even though nothing in the research-grade supply chain is obliged to meet them, because they tell you which numbers a competent analyst would consider worth reporting at all.
In practice: ask for the chromatogram, check the method section, check the lot number against the vial, and set your accept threshold before you see the result rather than after.
edited 3 Feb 2026 by tare_weight — added a caveat about sampling