// services / private ai

Private AI — a dedicated model that never leaves your perimeter

Unlike public models, CYBORA provisions a unique AI model for each company. It learns from your internal processes but never leaves your infrastructure — no shared training, no data exfiltration risk.

// sovereignty by design

Your data, your model, your perimeter

Built for organisations whose client files, precedents, and trade secrets must stay under absolute control.

Per-company model

A dedicated model provisioned for you alone. Nothing you feed it ever trains a shared or public system.

On-perimeter deployment

Runs inside your infrastructure or a dedicated sovereign environment — your jurisdiction, your keys.

Fraud-call interception

Flags fraudulent calls in real time and can intercept them before staff time is lost.

Client-service automation

Automates routine client communication using your tone, your processes, and your knowledge base.

Quantum-safe encryption

Model artefacts and data protected with keys sized for a post-quantum threat model.

Compliance-aware

Deployment documented and evidenced through Agentic GRC — AI use your regulator can inspect (ISO 42001 ready).

// why perimeter matters

Public AI tools weren't built for your confidential data

Popular AI assistants differ enormously in what their terms actually let you do with confidential, personal or professionally-privileged data — free tiers commonly allow the provider to use your input for training, paid tiers may require a separate Data Processing Agreement that often still carves out sensitive data categories, and web-search-augmented modes frequently add their own risk. Getting this right means a case-by-case legal and technical review of every tool, every subscription tier, and every configuration you use.

ConsiderationPublic AI assistants (typical)CYBORA Private AI
Data Processing AgreementVaries by vendor and tier — often a separate DPA to negotiateNot applicable — no third party ever processes your data
Use with confidential dataCase-by-case — frequently tier- and configuration-dependentAlways — data never leaves your perimeter
Use with personal dataOften restricted on free/entry tiersAlways
Use with professional secretsRarely supported without additional contractual amendmentsAlways
Provider's own use (training, improvement)Common on free and some paid tiersNever — no shared model, ever
Requires a per-tool risk assessmentYes — for every tool, every tier, every update to its termsNo — one deployment model, always private

General illustration only, not legal advice — actual terms vary by vendor, product tier and configuration, and change frequently. Always confirm current terms and complete your own risk assessment before processing confidential, personal or privileged data with any third-party AI tool.

Private AI deployment overview
// infrastructure engineering

Infrastructure optimization strategy: balancing VRAM budget and LLM performance

Running large language models in production takes surgical precision in planning video memory (VRAM). Getting the VRAM budget right isn't just about avoiding “Out of Memory” (OOM) errors — it determines how well the system scales and what the total cost of ownership (TCO) ends up being. Under-planning drives TCO up fast: teams reach for top-tier servers where a precisely quantized model on edge hardware would have been enough. The architect's job is to balance model accuracy against operating speed, starting with a clear picture of how quantization choices ripple through the rest of the infrastructure.

4-bit vs. 8-bit quantization

Quantization is a strategic model-compression technique that trades numerical precision for throughput. It isn't just about saving disk space — it's a direct lever on how many tokens per second you can serve.

Criterion4-bit quantization8-bit quantization
Memory saved~75% (~3.5x smaller)~50% (~2x smaller)
Saved per weight~3,500 bytes vs. 8-bit*baseline compression floor
Speed increaseup to 2.4x (single-stream)up to 1.8x
Accuracy loss2–5%<1%
Hardwareneeds specialised supportbroad compatibility
Best fitedge devices, consumer GPUsservers, accuracy-critical workloads

*Based on Llama-2 architecture figures.

4-bit vs. 8-bit — memory, speed and accuracy
■ 4-bit■ 8-bitMemory saved75%50%Speed increase2.4x1.8xAccuracy loss (lower is better)2–5%<1%
Each metric is on its own scale — 4-bit wins on memory and speed, 8-bit wins on accuracy retention.

Strategic insights

  • Performance jump: benchmarks show a Deepseek 7B model with AWQ (4-bit) reaching 130 tok/s, against 52 tok/s for the original configuration — 4-bit quantization dominates in speed-sensitive systems.
  • NF4 (Normal Float) format: the better choice for normally-distributed weights, holding accuracy better than standard INT4.
  • Hardware bottleneck: up to 90.6% of silicon area can be saved, but specialised cores are still required to realise the full gain.

VRAM budget and layer offloading

With llama.cpp or similar runtimes, the --n-gpu-layers (ngl) flag becomes the main lever — it sets how many transformer layers run on GPU versus get offloaded to CPU.

Weight-offload math: one layer of a 13B-parameter model at Q4 quantization takes roughly 0.19 GB — about 7.5 GB across 40 layers. But sizing purely off model weights is a mistake.

The architectural reserve rule

  1. The KV cache isn't free: a 13B model with an 8K context needs an extra 1–2 GB of VRAM reserved on top of the weights.
  2. Monitor, don't assume: verify the theoretical number in real time with nvidia-smi.
  3. The 90% rule: if model weights alone fill 90% of VRAM, an OOM error is all but guaranteed the moment context starts growing during generation.
Where a full VRAM budget actually goes
90% lineModel weights (~75%)KV cache Weights    KV cache (grows with context)    Free / reserve
Weights alone hitting 90% is the danger line — the KV cache still needs room to grow during generation.

Context length and KV cache dynamics

Dynamic context growth is the most common cause of system crashes. Architects need to size VRAM against the maximum session length that's actually possible, not the one they hope for.

Context length (tokens)Extra VRAM neededStrategic tool
16K~1 GBStandard query
64K~4 GB/compact (summarization)
128K~8 GB/tree (history navigation)
256K~16 GB/fork (branching)

Growing context eats directly into free VRAM, so when setting -ngl, always test against the maximum intended context length (-c) — not an empty session.

KV cache growth by context length
+1 GB16K tokens+4 GB64K tokens+8 GB128K tokens+16 GB256K tokensExtra VRAM needed for the KV cache, by context length
Each doubling of context roughly doubles the extra VRAM the KV cache needs on top of the model weights.

Multi-GPU and hybrid computing

When one card isn't enough, --tensor-split comes into play — but it introduces bus latency. Two 16 GB GPUs will be slower than one 32 GB GPU because of data transfer over the PCIe bus.

The Shared GPU Memory trap (Windows)

On Windows, NVIDIA drivers silently spill VRAM overflow into system RAM. That's a critical performance mistake:

  • 100% GPU offload relying on Shared VRAM: throughput drops to 0.69 tok/s.
  • 50/50 GPU–CPU hybrid that fits in dedicated VRAM: throughput reaches 2.32 tok/s.

Takeaway: explicitly assign layers to CPU rather than letting the system fall back to Shared Memory, which runs roughly 3x slower than a properly sized hybrid split. PCIe Gen 5 tops out around 64 GB/s, but for LLM workloads, bus speed remains the primary bottleneck.

Shared memory vs. explicit hybrid offload
100% GPU offload, spilling into Shared VRAM (Windows)0.69 tok/s50 / 50 GPU–CPU hybrid, fits in dedicated VRAM2.32 tok/s
Letting Windows spill into Shared GPU Memory is roughly 3x slower than deliberately splitting layers between GPU and CPU.

Conclusions and a recommendation matrix for architects

A sound strategy weighs model architecture, not just size. A common planning mistake involves Mixture-of-Experts (MoE) models — such as Gemma 4 26B A4B: even though only 4B parameters activate per token, VRAM has to hold all 26B parameters for fast routing to work.

Decision checklist for architects

  • Model choice: does the MoE architecture justify keeping the full weight mass resident in VRAM?
  • Quantization level: 4-bit for the best TCO, 8-bit for production-grade accuracy.
  • Layer allocation: is there headroom reserved for the KV cache (up to 16 GB at a 256K context)?
  • Context engineering: are summarization (/compact) and navigation (/tree) tools in place?
  • OS specifics: on Windows, strictly avoid Shared GPU Memory overflow.
“If you're fighting VRAM limits but want to run powerful LLMs, 4-bit quantization is a genuine game-changer.”— Ricardo Neves Junior, senior data scientist

Ultimately, system stability comes down to continuous monitoring with tools like nvidia-smi, making sure dynamic context growth never pushes the system past its physical VRAM limits.

// quantization deep-dive

4-bit or 8-bit? The quantization magic that fits a giant AI on your machine

Every local-AI enthusiast has hit the fatal message at least once: “CUDA out of memory.” You try to run a capable Llama 3 or Gemma 4 model, your GPU's VRAM fills instantly, and the system chokes. As an AI infrastructure engineer, the fix usually isn't a more expensive card — it's quantization.

Quantization compresses a model's weights by cutting their numerical precision — from 16-bit (FP16) down to 4-bit or 8-bit. Tools like llama.cpp and the GGUF format make this remarkably efficient, but that's where the real engineering trade-off starts: the 4-bit “sweet spot,” or 8-bit precision? Here's how that trade-off plays out across speed, memory, and a few hidden hardware traps.

Insight 1 — 4-bit: a breakthrough for consumer hardware

For most users, 4-bit quantization — especially the NF4 format — is the real unlock. It saves up to 75% memory and speeds up generation by as much as 2.4x, putting huge models within reach of an ordinary GPU. The engineering catch: 4-bit usually needs specialised hardware support, like Tensor Cores, to hit its top speed.

Aspect4-bit quantization8-bit quantization
Memory reduction~3.5x (vs. ~8x for FP32)~2x (vs. ~4x for FP32)
Accuracy impact2–5% drop (98.9% retained)<1% drop (99.9% retained)
Speed improvement2.4x (single-stream)1.8x faster
Hardwareneeds specific supportbroad compatibility
Best fithome GPUs, mobile devicesproduction servers, precision-critical tasks
“If you're fighting VRAM limits but want a powerful LLM, 4-bit is a game-changer.”— Ricardo Neves Junior

Insight 2 — 8-bit: when accuracy is non-negotiable

4-bit is tempting for its speed, but 8-bit remains the production standard — accuracy loss here is practically unnoticeable. The trick is in the calibration phase: using a representative dataset to set the optimal scale and zero-point parameters per layer, so the model performs reliably even under heavy request volume.

Insight 3 — What a model actually “weighs,” and MoE quirks

A common engineering myth: an 8B-parameter model always uses the same amount of memory. Not true. Llama-3-8B, for instance, needs roughly 16 GB of VRAM in raw FP16 — but once you add KV-cache overhead, real-world demand can reach 32 GB; after 4-bit compression, it runs comfortably under 10 GB.

One model, three VRAM budgets
Llama-3-8B: same model, three very different VRAM budgets~16 GBFP16 (raw weights)~32 GBFP16 + KV overhead~10 GB4-bit quantized
Llama-3-8B under raw FP16, FP16 with KV overhead, and after 4-bit quantization.
Mixture-of-Experts: resident vs. active
Gemma 4 26B A4B — resident vs. active parameters per token26B parameters resident in VRAM4Bactive per token — routing still needs the other 22B in reach
All 26B parameters stay in VRAM for routing, even though only 4B activate per token.

It gets more interesting with Mixture-of-Experts (MoE) models like Gemma 4 26B A4B:

  • Only 4B parameters activate per token, but all 26B parameters must stay in VRAM for routing to stay fast.
  • Engineering rule of thumb: budget at least 18 GB of VRAM for a 26B MoE model at Q4_K_M quantization.

Insight 4 — The silent VRAM killer and the Shared Memory trap

One of the most common beginner mistakes is underestimating the KV cache — it grows directly with context length:

  • 64K context: adds ~4 GB VRAM
  • 128K context: adds ~8 GB VRAM
  • 256K context: adds ~16 GB VRAM

Critical warning for Windows users: once the model and KV cache exceed dedicated VRAM, Windows silently falls back to Shared GPU Memory (system RAM). Throughput can fall from 2.32 tok/s to 0.69 tok/s — generation becomes roughly 3.5x slower than running on CPU alone.

If you plan to offload some layers to CPU with the -ngl flag, your PCIe bus becomes the bottleneck. Use at least PCIe Gen 4 or Gen 5 — Gen 3 will noticeably slow data transfer between RAM and GPU.

Insight 5 — DiffusionGemma: text generation like developing a photograph

The new, experimental DiffusionGemma model changes the rules. Instead of writing token by token (autoregressively), it uses bidirectional attention across a 256-token canvas — sketching a draft, then progressively “denoising” it until the text reads clean.

That architecture can hit 700+ tokens/sec on an RTX 5090 — with one exception: Apple Silicon. Because Macs use a unified memory architecture, they're often bandwidth-bound, so DiffusionGemma may run no faster than a standard Gemma 4 there, and quality still trails traditional models slightly.

DiffusionGemma throughput vs. autoregressive
Traditional autoregressive (reference)~150 tok/sDiffusionGemma on RTX 5090700+ tok/sDiffusionGemma on Apple Silicon (bandwidth-bound)≈ no gain
The gain is real on desktop GPUs — but bandwidth-bound unified memory on Apple Silicon erases most of the advantage.

Engineering recommendations — what to choose

  1. 4-bit (GGUF / Q4_K_M): the best choice for home users who want to run the largest model that fits in limited VRAM.
  2. 8-bit: required for server deployments and tasks where accuracy (<1% error) is critical.
  3. Mixed precision (MixLLM): keep high-salience layers at 8-bit and compress the rest to 4-bit for the best overall balance.

Engineering tip: always tune your layer count (-ngl) against your context length (-c). If you increase context, reduce GPU layers to avoid an OOM error mid-generation.

Are you ready to trade 3% accuracy for a local AI that's 2.5x faster and actually fits on the GPU you already own? From an engineering standpoint, the answer is almost always yes.

// full support request

Zobacz to na własnym perymetrze

Tell us where you are today. A CYBORA engineer — not a salesperson — will come back with what actually applies to your situation.

  • Reply within one business day
  • Scoped to your regulatory frameworks
  • No obligation, no sales pitch

By submitting you agree to our Privacy Policy.

// protecting what matters most

Take control of your perimeter

Register for a pilot demonstration of the CYBORA GRC and HybridSOC platform. One team, accountable for your full cyber security lifecycle.