Season 2, same 18 PDFs: Cover caught 100% of 149 private details, 0 leaked, 12 over-redacted, 3.2 s per PDF. Google Gemma 3 caught 69%, 53 leaked, 623 over-redacted, 24 s per PDF. Of 12 engines ranked by mistakes (leaked private details weigh most, and over-redactions count too), Google Gemma 3 places 9th and Cover 1st.
Sending PDFs with private identity information to a cloud Ai like Claude or ChatGPT is a bad idea. But could a local Ai on your own computer redact them instead? This bake-off runs Cover’s engine and the leading local Ai engines on the same 18 bank, tax and medical PDFs. So far the local Ai engines fall behind Cover in three ways: they over-redact, most are slow, and none offer a fast way to fix their mistakes.
PDF selection focuses on money, home and insurance documents. Real-world samples for anyone asking Ai about their own money, or accountants and tax pros who redact a client's documents before asking Ai for a second opinion. Watch Cover's engine improve with each release, even outpacing Google's tech.
| # | engine | PII accuracy | Over-redaction | Speed |
|---|---|---|---|---|
| 1 | 🥇 Cover | Excellent | Very good | Excellent |
| 2 | 🥈 Gemma 4Google | Very good | Very poor | Good |
| 3 | 🥉 Phi-4Microsoft | Good | Very poor | Poor |
| 4 | Qwen 3Alibaba | Good | Very poor | Very poor |
| 5 | Qwen 2.5Alibaba | Poor | Very poor | Good |
| 6 | DeepSeek R1DeepSeek | Poor | Very poor | Very poor |
| 7 | Llama 3.1Meta | Poor | Very poor | Good |
| 8 | Apple IntelligenceApple | Very poor | Very poor | Excellent |
| 9 | Gemma 3Google | Poor | Very poor | Good |
| 10 | Privacy FilterOpenAI | Poor | Very poor | Very good |
| 11 | RampartAmerica.gov | Very poor | Very poor | Excellent |
| 12 | NemotronOpenMed | Very poor | Very poor | Excellent |
Check out the actual pages below and how each engine redacted them, side by side with the original.
Catches 69% of the private details but over-redacts about 44 times as much as Cover, so its pages are hard to actually use.It catches a fair amount of PII, but redacts so much clean text that the redacted page is hard to actually use, the messiest output of the generative models.










































































































































































































































































































































Cover v1.0.2 vs Google Gemma 3 gemma3:latest · 18 real-world sample documents.
| metric · all 18 docs | Cover | Gemma 3 |
|---|---|---|
| Recall: PII correctly redacted | 100% | 69% |
| Leaks: confirmed PII left visible | 0 | 53 |
| Over-redaction: non-PII redacted by mistake | 12 | 623 |
| Speed: median time per PDF | ~3.2 sec/PDF | ~24 sec/PDF |
| document | Cover leaks | Gemma 3 leaks | Cover over | Gemma 3 over |
|---|---|---|---|---|
| ubs-portfolio-summary-sample | 0 | 1 | 0 | 142 |
| Fidelity-sample-statement | 0 | 2 | 2 | 117 |
| transunion-cameo-credit-report-sample | 0 | 7 | 0 | 111 |
| 2025_Tax_Return_Okafor-Brennan | 0 | 9 | 0 | 97 |
| cigna-eob-example | 0 | 3 | 0 | 48 |
| pershing-2024-sample-tax-yearend | 0 | 3 | 0 | 41 |
| pge-sample-bill-sparky-joule | 0 | 0 | 1 | 30 |
| commercebank-sample-statement | 0 | 1 | 3 | 15 |
| WellsFargo-sample-statement | 0 | 5 | 2 | 4 |
| allstate-auto-declarations-sample | 0 | 3 | 0 | 4 |
| fidelity-large-print-sample-statement | 0 | 2 | 0 | 4 |
| medicare-sample-part-b-msn | 0 | 5 | 4 | 4 |
| capitalone-sample-estatement | 0 | 0 | 0 | 2 |
| cfpb-draft-periodic-mortgage-statement | 0 | 1 | 0 | 2 |
| att-uverse-sample-bill | 0 | 4 | 0 | 1 |
| cfpb-ficus-bank-loan-estimate-sample | 0 | 0 | 0 | 1 |
| Lease_Agreement_signed | 0 | 7 | 0 | 0 |
| cfpb-sample-credit-card-statement-handout | 0 | 0 | 0 | 0 |
| TOTAL | 0 | 53 | 12 | 623 |
Test set: 18 public sample documents (149 verified PII items), held fixed across runs so results stay comparable. Every engine redacted the same documents; each output is scored against a Claude-authored gold standard (confirmed + ambiguous tiers), and every counted over-redaction is kept auditable. Pages and the leaderboard use the same weighting: leaked private details weigh most, and over-redactions count too.