Best-in-Class
PII Dectection,
Open Source
A 300M-parameter multilingual model for detecting
and redacting personally identifiable information.
Built for production privacy workflows.
0.471
avg. SPY
F1 score
42
entity
types
300M
params
encoder
RESEARCH
Capabilities of GLiNER2-PII
PII extraction. Identify and extract 42 entity types across seven categories - 5× coverage of OpenAI's Privacy Filter.
Learn more
Customizable schema at inference. The target schema is an input to the model, not baked into the weights.
Learn more
One forward pass, deterministic inference. Model evaluates all 42 entity types simultaneously.
Deploy GLiNER2-PII
EFFICIENCY
Smaller, faster, built to self-host
SOTA performance at fraction of the size
vs OpenAI Privacy Filter.
Low latency
Optimized for real-time, production pipelines.
Stay on your infrastructure
Apache 2.0 license. Can run on-prem or air-gapped, or deployed with Pioneer.
< 100ms
Average latency
per request
5x
Label coverage
versus OpenAI Privacy Filter
300M
Parameters
versus OpenAI's 1.5B
35M+
Downloads on
Hugging Face
![](data:image/svg+xml,<svg display="block" role="presentation" viewBox="0 0 1130 232" xmlns="http://www.w3.org/2000/svg"><path d="M 223.21 3.766 L 234.545 2.013 L 534.483 35.731 L 558.025 0 L 571.975 0 L 595.517 35.731 L 895.455 2.013 L 906.79 3.766 M 223.21 3.766 L 231.057 44.371 M 223.21 3.766 L 470.833 40.764 L 231.057 44.371 M 231.057 44.371 L 102.886 46.299 M 102.886 46.299 L 469.09 50.829 L 112.477 101.33 M 102.886 46.3 L 112.477 101.33 M 0 117.258 L 13.079 120.278 M 0 117.258 L 26.157 217.406 M 0 117.258 L 112.477 101.33 M 13.079 120.278 L 534.483 57.874 M 13.079 120.278 L 40.979 232 M 534.484 57.874 L 558.026 128.833 M 534.484 57.874 L 534.484 161.041 M 558.026 128.833 L 558.026 166.577 M 558.026 128.833 L 571.976 128.833 M 906.79 3.766 L 898.943 44.371 M 906.79 3.766 L 659.167 40.764 L 898.943 44.371 M 898.943 44.371 L 1027.11 46.299 M 1027.11 46.299 L 660.91 50.829 L 1017.52 101.33 M 1027.11 46.3 L 1017.52 101.33 M 1130 117.258 L 1116.92 120.278 M 1130 117.258 L 1103.84 217.406 M 1130 117.258 L 1017.52 101.33 M 1116.92 120.278 L 595.517 57.874 M 1116.92 120.278 L 1089.02 232 M 595.517 57.874 L 571.975 128.833 M 595.517 57.874 L 595.517 161.041 M 571.975 128.833 L 571.975 166.577" fill="transparent" height="231.99999987792967px" id="epMph3ju2" stroke-dasharray="" stroke-linecap="round" stroke-linejoin="round" stroke-width="1" stroke="rgb(229, 218, 213)" width="1130.0000439453124px"/></svg>)
GLiNER2-PII Benchmark Results
Evaluated on SPY (Synthetic PII Yesterday), 200 documents split evenly between legal Q&A forums and medical transcripts. None of the models in the comparison were trained on this data, making it an out-of-distribution test.
OpenAI Privacy Filter
NVIDIA GLiNER PII
FASTINO GLiNER2-PII
Parameters
1.5B
—
0.3B
Entity types
8 (fixed)
—
42 (customizable)
Architecture
Decoder (autoregressive)
Encoder (GLiNER)
Encoder (GLiNER2)
Custom schema at inference
Recall - Legal domain
0.640
0.431
0.722
Precision - Legal domain
0.250
0.374
0.522
F1 score - Legal domain
0.360
0.401
0.475
Recall - Medical domain
0.671
0.431
0.681
Precision - Medical domain
0.271
0.341
0.355
F1 score - Medical domain
0.386
0.381
0.467