Season 2, same 18 PDFs: Cover caught 100% of 149 private details, 0 leaked, 12 over-redacted, 3.2 s per PDF. Microsoft Phi-4 caught 75%, 50 leaked, 149 over-redacted, 37 s per PDF. Of 12 engines ranked by mistakes (leaked private details weigh most, and over-redactions count too), Microsoft Phi-4 places 3rd and Cover 1st.
Sending PDFs with private identity information to a cloud Ai like Claude or ChatGPT is a bad idea. But could a local Ai on your own computer redact them instead? This bake-off runs Cover’s engine and the leading local Ai engines on the same 18 bank, tax and medical PDFs. So far the local Ai engines fall behind Cover in three ways: they over-redact, most are slow, and none offer a fast way to fix their mistakes.
PDF selection focuses on money, home and insurance documents. Real-world samples for anyone asking Ai about their own money, or accountants and tax pros who redact a client's documents before asking Ai for a second opinion. Watch Cover's engine improve with each release, even outpacing Google's tech.
| # | engine | PII accuracy | Over-redaction | Speed |
|---|---|---|---|---|
| 1 | 🥇 Cover | Excellent | Very good | Excellent |
| 2 | 🥈 Gemma 4Google | Very good | Very poor | Good |
| 3 | 🥉 Phi-4Microsoft | Good | Very poor | Poor |
| 4 | Qwen 3Alibaba | Good | Very poor | Very poor |
| 5 | Qwen 2.5Alibaba | Poor | Very poor | Good |
| 6 | DeepSeek R1DeepSeek | Poor | Very poor | Very poor |
| 7 | Llama 3.1Meta | Poor | Very poor | Good |
| 8 | Apple IntelligenceApple | Very poor | Very poor | Excellent |
| 9 | Gemma 3Google | Poor | Very poor | Good |
| 10 | Privacy FilterOpenAI | Poor | Very poor | Very good |
| 11 | RampartAmerica.gov | Very poor | Very poor | Excellent |
| 12 | NemotronOpenMed | Very poor | Very poor | Excellent |
Check out the actual pages below and how each engine redacted them, side by side with the original.
Catches 75% of the private details, leaving 49 visible, and takes about 37 seconds per PDF to Cover's 3.One of the cleaner generative local models, and among the better engines at catching PII, though not the best of them. Even so it leaks more than ten times what Cover does and over-redacts far more, at several times the time per PDF.















































































































































































































































































































Cover v1.0.2 vs Microsoft Phi-4 phi4:latest · 18 real-world sample documents.
| metric · all 18 docs | Cover | Phi-4 |
|---|---|---|
| Recall: PII correctly redacted | 100% | 75% |
| Leaks: confirmed PII left visible | 0 | 50 |
| Over-redaction: non-PII redacted by mistake | 12 | 149 |
| Speed: median time per PDF | ~3.2 sec/PDF | ~37 sec/PDF |
| document | Cover leaks | Phi-4 leaks | Cover over | Phi-4 over |
|---|---|---|---|---|
| ubs-portfolio-summary-sample | 0 | 3 | 0 | 36 |
| 2025_Tax_Return_Okafor-Brennan | 0 | 7 | 0 | 30 |
| Fidelity-sample-statement | 0 | 5 | 2 | 24 |
| transunion-cameo-credit-report-sample | 0 | 13 | 0 | 23 |
| pershing-2024-sample-tax-yearend | 0 | 2 | 0 | 16 |
| medicare-sample-part-b-msn | 0 | 2 | 4 | 6 |
| pge-sample-bill-sparky-joule | 0 | 0 | 1 | 6 |
| commercebank-sample-statement | 0 | 0 | 3 | 5 |
| WellsFargo-sample-statement | 0 | 5 | 2 | 1 |
| cfpb-draft-periodic-mortgage-statement | 0 | 1 | 0 | 1 |
| cfpb-sample-credit-card-statement-handout | 0 | 0 | 0 | 1 |
| Lease_Agreement_signed | 0 | 6 | 0 | 0 |
| allstate-auto-declarations-sample | 0 | 0 | 0 | 0 |
| att-uverse-sample-bill | 0 | 3 | 0 | 0 |
| capitalone-sample-estatement | 0 | 0 | 0 | 0 |
| cfpb-ficus-bank-loan-estimate-sample | 0 | 1 | 0 | 0 |
| cigna-eob-example | 0 | 2 | 0 | 0 |
| fidelity-large-print-sample-statement | 0 | 0 | 0 | 0 |
| TOTAL | 0 | 50 | 12 | 149 |
Test set: 18 public sample documents (149 verified PII items), held fixed across runs so results stay comparable. Every engine redacted the same documents; each output is scored against a Claude-authored gold standard (confirmed + ambiguous tiers), and every counted over-redaction is kept auditable. Pages and the leaderboard use the same weighting: leaked private details weigh most, and over-redactions count too.