Accepted answer
2.6 percentage points, and the direction is the informative half. VendorInvestigate reports 96.8 per cent and the certificate 99.4, so the independent figure is lower. As impurity that is 3.2 per cent against 0.6 — 5.33 times as much unassigned area. A gentler gradient resolves impurities that a steeper one hides beneath the main peak, so the better method routinely reports the worse number; 2.6 points is comfortably inside what method choice alone produces on identical material. Ask both parties for the method section before you decide which figure is wrong, because the answer is often neither.
Stated carefully, understanding purity requires separating the chemistry from the method from the reporting convention, and the three are not independent.
Retention time is sequence-specific and method-specific, so comparing your result to a supplier value using a different method is meaningless without method documentation.
The fraction of your main peak that is actually your target versus isomers, fragments or related sequences is invisible without complementary identity testing.
The ICH Q3A impurity thresholds and the relevant pharmacopoeial chapters all specify method validation requirements that almost no research-grade certificate claims to meet.
I would be careful about over-reading a single measurement — treat it as a data point, not as ground truth.
Compare purity within a single laboratory on the same method, never across laboratories.