Private LLM deployment
What does Private LLM deployment cover?
Private LLM deployment that runs open models like DeepSeek, Kimi, and Qwen on servers you control, so customer data stays inside.
We set up an open-weight model on your own servers, in your private cloud, or on a network with no internet at all. Your apps call it like any AI API. The prompt, the answer, and the log never leave your network.Discuss this capabilityOpen models
- DeepSeek
- Kimi
- Qwen
- GLM
- Llama
- Mistral
- Gemma
- gpt-oss
The work
The prompt never leaves the building.
The common offer of "private AI" is often a public API with a privacy page. If the request leaves your network, the data has left too.
Open-weight models publish their weights. You download them once, check the file, and run them on your hardware. Nothing goes back to the maker.
Customer data stays inside. That is the answer a compliance team, an auditor, and a large client ask for, under rules such as GDPR, HIPAA, India's DPDP Act, or a bank's own policy. The model does not change overnight. A version you tested stays the version you run. There is no rate limit from someone else's traffic, and no outage on someone else's status page. You can fine-tune it on your own data, and the result is yours. It can run on a network with no internet at all. Switching models later is a config change, not a new vendor contract.
A public API sends a bill for every token. Your own model is a fixed cost: the GPUs, or a rented server, plus power and upkeep. When usage is steady and high, many staff, long documents, agents that run all day, the fixed cost wins and the bill stops growing with use. A small open model also does everyday jobs, such as sorting tickets, reading invoices, and drafting replies, for far less than a frontier model. We size to the job, not the leaderboard.
Size comes first. A support assistant or a document reader often fits one 24 GB or 80 GB GPU, with gpt-oss-20b or Qwen3.8-27B. DeepSeek V4 Flash needs a server with several GPUs. Kimi K3, and the largest GLM and Qwen models, need a cluster. A mixture-of-experts model saves compute, not memory. We test three candidates and ship the smallest one that passes.
The license is the second check. DeepSeek V4 is MIT. gpt-oss is Apache 2.0. Kimi K3 and Qwen3.8 add terms once you resell access past a revenue line. We read the LICENSE file before you buy a GPU.
Then the plumbing. vLLM or SGLang serves many people at once. Ollama or llama.cpp is enough for a pilot. A gateway speaks the same API your apps already use, so swapping a model is a config change. It checks who is calling, limits each team, and writes every prompt to a store you own.
Before you buy hardware, we put your current API bill next to the GPU cost at your real volume. If an API is cheaper and the data is not sensitive, we say so. If owning the model wins, you see the month it pays for itself. Either way you spend against a number, not a guess.
Best for Banks, hospitals, legal and government teams, and any company whose contracts or regulators say customer data cannot go to a public AI API.
Core capability
- Open models on your servers, private cloud, or an air-gapped site
- A cost check: your API bill against owning the hardware
- Model choice and GPU sizing tested on your own tasks
- A private gateway with sign-in, limits, and audit logs
- Private search over your documents, and fine-tuning on your data
What moves forward
- A cost sheet with the payback month, before any hardware is bought
- A model running on hardware you control, with no per-token bill
- A test set that decides every model change
- A runbook to update, roll back, and scale
How we approach it
Your data, your servers, your model.
- 01
Price it before you build it
We put your API bill against the GPU cost at your real volume, and name the month it pays back. Then we pick the smallest model that passes a test set built from your tickets, documents, or code. A leaderboard score is the maker's claim.
- 02
Close the network
Weights come from an internal registry, and the file hash is checked. There is no outbound path, and telemetry is off. On a site with no internet, updates arrive on media you control.
- 03
Put a gateway in front
One API, the same shape your apps already call. Sign-in goes through your identity provider. Each team has a limit. Every prompt is written to your own audit log.
- 04
Keep the old model ready
A new model, or a fine-tune, passes the test set before it takes traffic. The previous version stays loaded. The guardrails live in the gateway, because an open model can have its safeguards removed.
Technology choices
A capable stack starts with the constraints.
These are technologies we can bring to this work when they fit the product, team, and operating environment.
How we choose technology- DockerDocker consulting for repeatable runtime environments for services and agents.
- KubernetesKubernetes consulting for a shared rollout path when several services need one.
- PythonPython development for APIs and data jobs that should not sit inside a click.
- PostgreSQLPostgreSQL development for relational foundations of operational products.
- pgvectorpgvector development for vector similarity search inside PostgreSQL.
- QdrantQdrant development for vector search with rich filtering.
- LangChainLangChain development for retrieval and tool-using model workflows.
Private LLM deployment
Make the next decision concrete.
Share the outcome, constraints, and current system. We’ll help identify the right starting shape.