Best Local LLMs for Privacy

作者: Jakub Rusinowski · 最后更新: 2026年8月15日

Work with data that must never leave your machine — legal, medical, financial or personal records.

Top pick: GPT-OSS 20B

Scores 93.4/100 for privacy-sensitive work. 21B parameters, needing about 13.4 GB at Q4_K_M, 128K context, Apache-2.0.

Ranked for privacy-sensitive work

ModelScoreParamsContextLicenceQuality index
1. GPT-OSS 20B93.421B128KApache-2.0— (estimated)
2. Qwen 3.7 35B-A3B92.535B256KApache-2.0— (estimated)
3. Gemma 4 31B92.231B250KApache-2.0— (estimated)
4. GLM-4.7-Flash 30B-A3B92.130B193KMIT— (estimated)
5. Qwen 3.6 35B-A3B91.835B256KApache-2.0— (estimated)
6. 1-bit Bonsai 27B91.227B256KApache 2.0— (estimated)

Frontier open-weight models (multi-GPU / private cloud)

These also score for privacy-sensitive work, but none runs on a single consumer GPU or workstation, so they are listed apart rather than ranked against the local picks above.

Best pick for your memory budget

The strongest model overall is rarely the right answer — what matters is the strongest model that fits the memory you have. These picks are re-ranked per tier, so each one uses its budget rather than simply being small.

MemoryTypical hardwareRecommended models
8 GBRTX 4060, RTX 3070, base MacBook Air1-bit Bonsai 27B (90.8)
GLM-6 9B (90.5)
GLM-4 9B (90.4)
12 GBRTX 3060 12 GB, RTX 5070Qwen 3 14B (91.7)
DeepSeek R1 Distill Qwen 14B (91.4)
Qwen 3.5 14B (90.2)
16 GBRTX 5080, RTX 4080, RX 9070 XTGPT-OSS 20B (95.2)
Qwen 3 14B (91.7)
Mistral Small 3.1 24B (91.4)
24 GBRTX 4090, RTX 3090, RX 7900 XTXQwen 3.7 35B-A3B (95.5)
GLM-4.7-Flash 30B-A3B (95.2)
Gemma 4 31B (95.2)
48 GBRTX 6000 Ada, MacBook Pro M4 Max 48 GBGLM-5.1 72B (94.8)
Qwen 3.7 35B-A3B (93.7)
Cogito v1 70B (93.4)
128 GB+Mac Studio, DGX Spark, multi-GPUGPT-OSS 120B (99.3)
Qwen 3.5 122B-A10B (93)
Qwen 3.5 122B-A10B (MoE) (92.7)

How this ranking works

Weighted toward models that are practical to run entirely on hardware you own: a high licence weight (0.8) plus a moderate quality floor, rather than chasing the largest model. A model you cannot actually run locally scores nothing here no matter how capable it is.

Worked example — GPT-OSS 20B: capability 82.8 × 0.388, quality 82 × 0.228, context 100 × 0.148, license 100 × 0.082, accessibility 88 × 0.154 + 6 tag bonus (local-first, privacy-sensitive).

Requirements applied: context floor 16,384 tokens (ideal 131,072), quality floor 50, licence weight 0.8, latency weight 0.45.

Running privacy-sensitive work locally

FAQ

What is the best local LLM for privacy-sensitive work?

GPT-OSS 20B, scoring 93.4/100 against this workload's published requirements. 159 models qualified.

What hardware do I need for privacy-sensitive work?

A credible answer starts at 8 GB of memory. Larger budgets unlock materially stronger models — the table above lists the best pick at each tier.

How were these models ranked?

Weighted toward models that are practical to run entirely on hardware you own: a high licence weight (0.8) plus a moderate quality floor, rather than chasing the largest model. A model you cannot actually run locally scores nothing here no matter how capable it is.

Hardware for This Workload

Related Workloads

Top Pick

Tools

← All workloads | Check your hardware