Private AI — a dedicated model that never leaves your perimeter
Unlike public models, CYBORA provisions a unique AI model for each company. It learns from your internal processes but never leaves your infrastructure — no shared training, no data exfiltration risk.
Your data, your model, your perimeter
Built for organisations whose client files, precedents, and trade secrets must stay under absolute control.
Per-company model
A dedicated model provisioned for you alone. Nothing you feed it ever trains a shared or public system.
On-perimeter deployment
Runs inside your infrastructure or a dedicated sovereign environment — your jurisdiction, your keys.
Fraud-call interception
Flags fraudulent calls in real time and can intercept them before staff time is lost.
Client-service automation
Automates routine client communication using your tone, your processes, and your knowledge base.
Quantum-safe encryption
Model artefacts and data protected with keys sized for a post-quantum threat model.
Compliance-aware
Deployment documented and evidenced through Agentic GRC — AI use your regulator can inspect (ISO 42001 ready).
Public AI tools weren't built for your confidential data
Popular AI assistants differ enormously in what their terms actually let you do with confidential, personal or professionally-privileged data — free tiers commonly allow the provider to use your input for training, paid tiers may require a separate Data Processing Agreement that often still carves out sensitive data categories, and web-search-augmented modes frequently add their own risk. Getting this right means a case-by-case legal and technical review of every tool, every subscription tier, and every configuration you use.
| Consideration | Public AI assistants (typical) | CYBORA Private AI |
|---|---|---|
| Data Processing Agreement | Varies by vendor and tier — often a separate DPA to negotiate | Not applicable — no third party ever processes your data |
| Use with confidential data | Case-by-case — frequently tier- and configuration-dependent | Always — data never leaves your perimeter |
| Use with personal data | Often restricted on free/entry tiers | Always |
| Use with professional secrets | Rarely supported without additional contractual amendments | Always |
| Provider's own use (training, improvement) | Common on free and some paid tiers | Never — no shared model, ever |
| Requires a per-tool risk assessment | Yes — for every tool, every tier, every update to its terms | No — one deployment model, always private |
General illustration only, not legal advice — actual terms vary by vendor, product tier and configuration, and change frequently. Always confirm current terms and complete your own risk assessment before processing confidential, personal or privileged data with any third-party AI tool.

Infrastructure optimization strategy: balancing VRAM budget and LLM performance
Running large language models in production takes surgical precision in planning video memory (VRAM). Getting the VRAM budget right isn't just about avoiding “Out of Memory” (OOM) errors — it determines how well the system scales and what the total cost of ownership (TCO) ends up being. Under-planning drives TCO up fast: teams reach for top-tier servers where a precisely quantized model on edge hardware would have been enough. The architect's job is to balance model accuracy against operating speed, starting with a clear picture of how quantization choices ripple through the rest of the infrastructure.
4-bit vs. 8-bit quantization
Quantization is a strategic model-compression technique that trades numerical precision for throughput. It isn't just about saving disk space — it's a direct lever on how many tokens per second you can serve.
| Criterion | 4-bit quantization | 8-bit quantization |
|---|---|---|
| Memory saved | ~75% (~3.5x smaller) | ~50% (~2x smaller) |
| Saved per weight | ~3,500 bytes vs. 8-bit* | baseline compression floor |
| Speed increase | up to 2.4x (single-stream) | up to 1.8x |
| Accuracy loss | 2–5% | <1% |
| Hardware | needs specialised support | broad compatibility |
| Best fit | edge devices, consumer GPUs | servers, accuracy-critical workloads |
*Based on Llama-2 architecture figures.
Strategic insights
- Performance jump: benchmarks show a Deepseek 7B model with AWQ (4-bit) reaching 130 tok/s, against 52 tok/s for the original configuration — 4-bit quantization dominates in speed-sensitive systems.
- NF4 (Normal Float) format: the better choice for normally-distributed weights, holding accuracy better than standard INT4.
- Hardware bottleneck: up to 90.6% of silicon area can be saved, but specialised cores are still required to realise the full gain.
VRAM budget and layer offloading
With llama.cpp or similar runtimes, the --n-gpu-layers (ngl) flag becomes the main lever — it sets how many transformer layers run on GPU versus get offloaded to CPU.
Weight-offload math: one layer of a 13B-parameter model at Q4 quantization takes roughly 0.19 GB — about 7.5 GB across 40 layers. But sizing purely off model weights is a mistake.
The architectural reserve rule
- The KV cache isn't free: a 13B model with an 8K context needs an extra 1–2 GB of VRAM reserved on top of the weights.
- Monitor, don't assume: verify the theoretical number in real time with nvidia-smi.
- The 90% rule: if model weights alone fill 90% of VRAM, an OOM error is all but guaranteed the moment context starts growing during generation.
Context length and KV cache dynamics
Dynamic context growth is the most common cause of system crashes. Architects need to size VRAM against the maximum session length that's actually possible, not the one they hope for.
| Context length (tokens) | Extra VRAM needed | Strategic tool |
|---|---|---|
| 16K | ~1 GB | Standard query |
| 64K | ~4 GB | /compact (summarization) |
| 128K | ~8 GB | /tree (history navigation) |
| 256K | ~16 GB | /fork (branching) |
Growing context eats directly into free VRAM, so when setting -ngl, always test against the maximum intended context length (-c) — not an empty session.
Multi-GPU and hybrid computing
When one card isn't enough, --tensor-split comes into play — but it introduces bus latency. Two 16 GB GPUs will be slower than one 32 GB GPU because of data transfer over the PCIe bus.
The Shared GPU Memory trap (Windows)
On Windows, NVIDIA drivers silently spill VRAM overflow into system RAM. That's a critical performance mistake:
- 100% GPU offload relying on Shared VRAM: throughput drops to 0.69 tok/s.
- 50/50 GPU–CPU hybrid that fits in dedicated VRAM: throughput reaches 2.32 tok/s.
Takeaway: explicitly assign layers to CPU rather than letting the system fall back to Shared Memory, which runs roughly 3x slower than a properly sized hybrid split. PCIe Gen 5 tops out around 64 GB/s, but for LLM workloads, bus speed remains the primary bottleneck.
Conclusions and a recommendation matrix for architects
A sound strategy weighs model architecture, not just size. A common planning mistake involves Mixture-of-Experts (MoE) models — such as Gemma 4 26B A4B: even though only 4B parameters activate per token, VRAM has to hold all 26B parameters for fast routing to work.
Decision checklist for architects
- Model choice: does the MoE architecture justify keeping the full weight mass resident in VRAM?
- Quantization level: 4-bit for the best TCO, 8-bit for production-grade accuracy.
- Layer allocation: is there headroom reserved for the KV cache (up to 16 GB at a 256K context)?
- Context engineering: are summarization (/compact) and navigation (/tree) tools in place?
- OS specifics: on Windows, strictly avoid Shared GPU Memory overflow.
“If you're fighting VRAM limits but want to run powerful LLMs, 4-bit quantization is a genuine game-changer.”— Ricardo Neves Junior, senior data scientist
Ultimately, system stability comes down to continuous monitoring with tools like nvidia-smi, making sure dynamic context growth never pushes the system past its physical VRAM limits.
4-bit or 8-bit? The quantization magic that fits a giant AI on your machine
Every local-AI enthusiast has hit the fatal message at least once: “CUDA out of memory.” You try to run a capable Llama 3 or Gemma 4 model, your GPU's VRAM fills instantly, and the system chokes. As an AI infrastructure engineer, the fix usually isn't a more expensive card — it's quantization.
Quantization compresses a model's weights by cutting their numerical precision — from 16-bit (FP16) down to 4-bit or 8-bit. Tools like llama.cpp and the GGUF format make this remarkably efficient, but that's where the real engineering trade-off starts: the 4-bit “sweet spot,” or 8-bit precision? Here's how that trade-off plays out across speed, memory, and a few hidden hardware traps.
Insight 1 — 4-bit: a breakthrough for consumer hardware
For most users, 4-bit quantization — especially the NF4 format — is the real unlock. It saves up to 75% memory and speeds up generation by as much as 2.4x, putting huge models within reach of an ordinary GPU. The engineering catch: 4-bit usually needs specialised hardware support, like Tensor Cores, to hit its top speed.
| Aspect | 4-bit quantization | 8-bit quantization |
|---|---|---|
| Memory reduction | ~3.5x (vs. ~8x for FP32) | ~2x (vs. ~4x for FP32) |
| Accuracy impact | 2–5% drop (98.9% retained) | <1% drop (99.9% retained) |
| Speed improvement | 2.4x (single-stream) | 1.8x faster |
| Hardware | needs specific support | broad compatibility |
| Best fit | home GPUs, mobile devices | production servers, precision-critical tasks |
“If you're fighting VRAM limits but want a powerful LLM, 4-bit is a game-changer.”— Ricardo Neves Junior
Insight 2 — 8-bit: when accuracy is non-negotiable
4-bit is tempting for its speed, but 8-bit remains the production standard — accuracy loss here is practically unnoticeable. The trick is in the calibration phase: using a representative dataset to set the optimal scale and zero-point parameters per layer, so the model performs reliably even under heavy request volume.
Insight 3 — What a model actually “weighs,” and MoE quirks
A common engineering myth: an 8B-parameter model always uses the same amount of memory. Not true. Llama-3-8B, for instance, needs roughly 16 GB of VRAM in raw FP16 — but once you add KV-cache overhead, real-world demand can reach 32 GB; after 4-bit compression, it runs comfortably under 10 GB.
It gets more interesting with Mixture-of-Experts (MoE) models like Gemma 4 26B A4B:
- Only 4B parameters activate per token, but all 26B parameters must stay in VRAM for routing to stay fast.
- Engineering rule of thumb: budget at least 18 GB of VRAM for a 26B MoE model at Q4_K_M quantization.
Insight 4 — The silent VRAM killer and the Shared Memory trap
One of the most common beginner mistakes is underestimating the KV cache — it grows directly with context length:
- 64K context: adds ~4 GB VRAM
- 128K context: adds ~8 GB VRAM
- 256K context: adds ~16 GB VRAM
Critical warning for Windows users: once the model and KV cache exceed dedicated VRAM, Windows silently falls back to Shared GPU Memory (system RAM). Throughput can fall from 2.32 tok/s to 0.69 tok/s — generation becomes roughly 3.5x slower than running on CPU alone.
If you plan to offload some layers to CPU with the -ngl flag, your PCIe bus becomes the bottleneck. Use at least PCIe Gen 4 or Gen 5 — Gen 3 will noticeably slow data transfer between RAM and GPU.
Insight 5 — DiffusionGemma: text generation like developing a photograph
The new, experimental DiffusionGemma model changes the rules. Instead of writing token by token (autoregressively), it uses bidirectional attention across a 256-token canvas — sketching a draft, then progressively “denoising” it until the text reads clean.
That architecture can hit 700+ tokens/sec on an RTX 5090 — with one exception: Apple Silicon. Because Macs use a unified memory architecture, they're often bandwidth-bound, so DiffusionGemma may run no faster than a standard Gemma 4 there, and quality still trails traditional models slightly.
Engineering recommendations — what to choose
- 4-bit (GGUF / Q4_K_M): the best choice for home users who want to run the largest model that fits in limited VRAM.
- 8-bit: required for server deployments and tasks where accuracy (<1% error) is critical.
- Mixed precision (MixLLM): keep high-salience layers at 8-bit and compress the rest to 4-bit for the best overall balance.
Engineering tip: always tune your layer count (-ngl) against your context length (-c). If you increase context, reduce GPU layers to avoid an OOM error mid-generation.
Are you ready to trade 3% accuracy for a local AI that's 2.5x faster and actually fits on the GPU you already own? From an engineering standpoint, the answer is almost always yes.
Sehen Sie es in Ihrem eigenen Perimeter
Tell us where you are today. A CYBORA engineer — not a salesperson — will come back with what actually applies to your situation.
- Reply within one business day
- Scoped to your regulatory frameworks
- No obligation, no sales pitch
Take control of your perimeter
Register for a pilot demonstration of the CYBORA GRC and HybridSOC platform. One team, accountable for your full cyber security lifecycle.