SAVRN
Search Contact SAVRN

Open-weight model · Token classification

privacy-filter

by OpenAI openai/privacy-filter

OpenAI Privacy Filter is a bidirectional token-classification model for personally identifiable information (PII) detection and masking in text.

Parameters1.4B
Context131,072
Weights5.6 GB
Licenseapache-2.0
AccessOpen weights
Monthly Downloads231.7k

Runs On

What it takes to serve privacy-filter (1.4B parameters): the memory its weights need at each precision, and the cheapest way to rent enough data-center GPUs to hold them.

PrecisionWeightsMemory neededCheapest setupPer hourAlso fits
16-bit 2.8 GB 3.4 GB 1x MI300X (192 GB)
Vultr
$1.85 1x H100 $1.99 · 1x MI325X $2.00
8-bit 1.4 GB 1.7 GB 1x MI300X (192 GB)
Vultr
$1.85 1x H100 $1.99 · 1x MI325X $2.00
4-bit 0.7 GB 0.8 GB 1x MI300X (192 GB)
Vultr
$1.85 1x H100 $1.99 · 1x MI325X $2.00

Memory is the weights at that precision plus 20% for the runtime and a short context; a long context needs more. Prices are the lowest on-demand hourly rates in the SAVRN Index, read Sep 18, 2026.

Model Card

By OpenAI, published under apache-2.0, revision 7ffa9a043d54.

OpenAI Privacy Filter is a bidirectional token-classification model for personally identifiable information (PII) detection and masking in text. It is intended for high-throughput data sanitization workflows where teams need a model that they can run on-premises that is fast, context-aware, and tunable.

OpenAI Privacy Filter is pretrained autoregressively to arrive at a checkpoint with similar architecture to gpt-oss, albeit of a smaller size. We then converted that checkpoint into a bidirectional token classifier over a privacy label taxonomy, and post-trained with a supervised classification loss. (For architecture details about gpt-oss, please see the gpt-oss model card.) Instead of generating text token-by-token, this model labels an input sequence in a single forward pass, then decodes coherent spans with a constrained Viterbi procedure. For each input token, the model predicts a probability distribution over the label taxonomy which consists of 8 output categories described below.

Highlights:

Read the full model card (1,361 words)

Configuration

Architecture
OpenAIPrivacyFilterForTokenClassification
Context length (tokens)
131,072
Layers
8
Hidden size
640
Feed-forward size
640
Attention heads
14
Key/value heads
2
Head dimension
64
Vocabulary size
200,064
Experts
128
Experts active per token
4
Sliding window (tokens)
128
Model type
openai_privacy_filter

Identity and Version

Repository
openai/privacy-filter
Publisher
OpenAI
Task
Token classification
Modality
Text
Library
transformers
Parameters
1.4B parameters
Languages
Not stated by the source
Revision
7ffa9a043d54d1be65afb281eddf0ffbe629385b
First published
2026-04-17
Last updated
2026-04-22

Files and Weights

25 files, 17.4 GB in total. The weights are 7 files totalling 5.6 GB in onnx, safetensors.

Weights7 files · 5.6 GB
Configuration5 files · 8.6 KB
Tokenizer2 files · 27.9 MB
Documentation1 file · 11.1 KB
Other9 files · 11.8 GB
Repository1 file · 2.1 KB
Every file
FileTypeSizeSHA-256
model.safetensorsWeights2.8 GB 06f66b87650b
onnx/model.onnxWeights137.7 KB 6aafae803749
onnx/model_fp16.onnxWeights142.9 KB 04978ae127ae
onnx/model_q4.onnxWeights160.2 KB 8f7dee8b46d0
onnx/model_q4f16.onnxWeights165.7 KB eaae4e83cf13
onnx/model_quantized.onnxWeights162.2 KB a325fb534156
original/model.safetensorsWeights2.8 GB 9c262cbe68a0
config.jsonConfiguration3.0 KB
original/config.jsonConfiguration707 B
original/dtypes.jsonConfiguration4.1 KB
original/viterbi_calibration.jsonConfiguration372 B
viterbi_calibration.jsonConfiguration372 B
README.mdDocumentation11.1 KB
model.sigOther8.7 KB
onnx/model.onnx_dataOther1.8 GB 26bfdd86ff07
onnx/model.onnx_data_1Other1.9 GB b5f641c184d5
onnx/model.onnx_data_2Other1.9 GB 4c12392ea557
onnx/model_fp16.onnx_dataOther2.1 GB 744ef21b5311
onnx/model_fp16.onnx_data_1Other741.4 MB 77d85417c031
onnx/model_q4.onnx_dataOther917.1 MB f30998e28c71
onnx/model_q4f16.onnx_dataOther809.1 MB 6d4dde787e03
onnx/model_quantized.onnx_dataOther1.6 GB 50f4c8c7f3c2
.gitattributesRepository2.1 KB
tokenizer.jsonTokenizer27.9 MB 0614fe83cada
tokenizer_config.jsonTokenizer234 B

License and Download

License
apache-2.0
Access
Open weights, no gate
Download size
5.6 GB
Download from OpenAI

Released by OpenAI through its official repository on Hugging Face. Read the license.

Memory Requirements

PrecisionWeights in memory
As published5.6 GB
16-bit2.8 GB
8-bit1.4 GB
4-bit0.7 GB

Weights only, from the published parameter count; the key-value cache and runtime add to this.

Built on This Model

Questions About privacy-filter

How much GPU memory does privacy-filter need?

About 3.4 GB at 16-bit and 0.8 GB at 4-bit: the weights (1.4B parameters) plus a working margin. A long context needs more.

What is the cheapest GPU to run privacy-filter on?

At 16-bit, 1x MI300X from $1.85 an hour; at 4-bit, 1x MI300X from $1.85 an hour, at the lowest on-demand prices the SAVRN Index lists.

Can I use privacy-filter commercially?

Yes. privacy-filter is released under Apache License 2.0. The Apache License 2.0 is a permissive open-source license. It permits commercial use, modification and redistribution. It requires keeping the license and copyright notices and any NOTICE file, stating significant changes, and it includes an express patent grant from contributors.

What is privacy-filter's context length?

131,072 tokens, from the maximum position embeddings in its published configuration.

Similar Models

Model · Token classification

privacy-filter-multilingual

OpenMed

Fine-tuned openai/privacy-filter for fine-grained PII extraction across 54 categories in 16 languages. The base model ships with 8 coarse PII categories and English-only training. This model trades that for a 6.75× more granular vocabulary spanning identity, contact, address, financial, vehicle, digital, and crypto labels — all evaluated across 16 languages. OpenMed gives you extractpii() / deidentify() with built-in BIOES Viterbi decoding, span refinement, and a Faker-backed obfuscation engine. Same call on every host — Apple Silicon picks up MLX automatically; everywhere else uses this PyTorch checkpoint. OpenMed/privacy-filter-multilingual-mlx model names also work in the same…

Open weights apache-2.0 1.4B parameters 131,072 tokens transformers

Model · Token classification

OpenMed-NER-OncologyDetect-MultiMed-568M

OpenMed

Specialized model for Cancer Genetics - Cancer-related genetic entities This model is a state-of-the-art fine-tuned transformer engineered to deliver enterprise-grade accuracy for cancer genetics - cancer-related genetic entities. This specialized model excels at identifying and extracting biomedical entities from clinical texts, research papers, and healthcare documents, enabling applications such as drug interaction detection, medication extraction from patient records, adverse event monitoring, literature mining for drug discovery, and biomedical knowledge graph construction with production-ready reliability for clinical and research applications. This model can identify and classify the…

Open weights apache-2.0 567M parameters 8,194 tokens transformers

Model · Token classification

OpenMed-NER-ChemicalDetect-MultiMed-568M

OpenMed

Specialized model for Chemical Entity Recognition - Identifies chemical compounds and substances in biomedical literature This model is a state-of-the-art fine-tuned transformer engineered to deliver enterprise-grade accuracy for chemical entity recognition - identifies chemical compounds and substances in biomedical literature. This specialized model excels at identifying and extracting biomedical entities from clinical texts, research papers, and healthcare documents, enabling applications such as drug interaction detection, medication extraction from patient records, adverse event monitoring, literature mining for drug discovery, and biomedical knowledge graph construction with…

Open weights apache-2.0 567M parameters 8,194 tokens transformers

This model was introduced in the paper LLMLingua-2: Data Distillation for Efficient and Faithful Task-Agnostic Prompt Compression (Pan et al, 2024). It is a XLM-RoBERTa (large-sized model) finetuned to perform token classification for task agnostic prompt compression. The probability $p{preserve}$ of each token $xi$ is used as the metric for compression. This model is trained on the extractive text compression dataset constructed with the methodology proposed in the LLMLingua-2, using training examples from MeetingBank (Hu et al, 2023) as the seed data. You can evaluate the model on downstream tasks such as question answering (QA) and summarization over compressed meeting transcripts using…

Open weights mit 559M parameters 514 tokens transformers

Model · Token classification

fullstop-punctuation-multilang-large

Oliver Guhr

This model predicts the punctuation of English, Italian, French and German texts. We developed it to restore the punctuation of transcribed spoken language. This multilanguage model was trained on the Europarl Dataset provided by the SEPP-NLG Shared Task. Please note that this dataset consists of political speeches. Therefore the model might perform differently on texts from other domains. The model restores the following punctuation markers: "." "," "?" "-" ":" We provide a simple python package that allows you to process text of any length. To get started install the package from pypi: output output The performance differs for the single punctuation markers as hyphens and colons, in many…

Open weights mit 559M parameters 514 tokens transformers

Model · Token classification

OpenMed-NER-GenomicDetect-BigMed-560M

OpenMed

Specialized model for Gene Entity Recognition - Gene-related entities This model is a state-of-the-art fine-tuned transformer engineered to deliver enterprise-grade accuracy for gene entity recognition - gene-related entities. This specialized model excels at identifying and extracting biomedical entities from clinical texts, research papers, and healthcare documents, enabling applications such as drug interaction detection, medication extraction from patient records, adverse event monitoring, literature mining for drug discovery, and biomedical knowledge graph construction with production-ready reliability for clinical and research applications. This model can identify and classify the…

Open weights apache-2.0 559M parameters 514 tokens transformers