A local LLM model is the set of weights, tokenizer, and license you will pin on infrastructure you control. Choosing it is a fitness test against your tasks, GPUs, and legal constraints, not a hunt for a public leaderboard winner.
Choosing a local LLM model is the work of matching license, provenance, context length, tool behavior, and GPU memory to a named enterprise deployment, then proving that match with your own evals. The model card is an input. It is not the decision.

Platform and risk owners should freeze a shortlist before anyone downloads fifteen variants. This page is a selection method. It is not a how-to-deploy guide and not a ranked list of vendors.
Which gates should kill a candidate first?
| Gate |
Pass looks like |
Fail looks like |
| License and use |
Counsel can accept commercial serving and fine-tunes in writing |
Research-only, unclear derivatives, or a clause you cannot meet |
| Provenance |
You can name the publisher, hash, and where the file came from |
A torrent-shaped mirror or an unnamed “quant” with no base hash |
| Task fit |
Your prompts, languages, and tools pass a frozen eval set |
Great arena scores, weak on your contracts or your JSON schema |
| Context you will pay for |
The window you need fits the GPUs you have at the batch you need |
A 128k sticker that forces one-user occupancy you cannot afford |
| Operations pin |
Tokenizer, chat template, and serving image are versioned together |
Each engineer “just pulls latest” and answers drift |
Run legal and provenance before quality. A brilliant checkpoint you cannot serve is a science project. A convenient checkpoint you cannot explain to audit is a future incident. Do not invert that order because a demo looked fluent.
How do you compare remaining models without a fake ranking?
Build one eval kit: production prompts, refusal cases, tool-call traces, and a multilingual slice if you have one. Score exact tasks, not vibes. If two models tie on the kit, prefer the one that fits exclusive GPUs with margin and the simpler license. That is a decision rule, not a claim that the model is “best.”
Test tool calling and structured output as first-class gates. Enterprise deployments die on broken function calls more often than on trivia questions. If the candidate needs exotic decoding tricks to emit valid JSON, it is not ready. Keep decoding settings in the eval record so a later serving flag cannot silently change the winner.
Test the serving image you will run, not a laptop GGUF unless laptop GGUF is the product. Tokenizer files and chat templates change answers. Pin them. Dedicated private AI infrastructure is where that pin stays honest, because the same exclusive GPUs can host the bake-off without a public API rewriting the prompt.
How should GPU memory change the shortlist?
Write the serving shape first: weights precision, KV size at max context, concurrency, and whether you will run one model or many adapters. Then drop candidates that only fit with offload you have not accepted. A model that needs five cards for a single replica is a cluster decision, not a trophy.
A smaller dense model that passes the eval on one GPU will beat a larger model that forces you to shard before you have a fabric story. Do not pick a 70B-class checkpoint because the name sounds serious if a 7B–32B candidate already hits the contract tasks. Size is not quality.
Leave headroom for the next context bump. Teams that pack a GPU to 97% on day one create the first OOM after a prompt-template change. Exclusive U.S. capacity, including OneSource Cloud sites in Texas / Richardson, should be sized to the replica you measured, not to a parameter-count rumor.
What belongs in the decision memo?
Name the winner, the two runners-up, the eval hash, the license note, the GPU shape, and the serving pin. Name who can change the pin. If product wants a new model next quarter, they submit a new bake-off. They do not “swap weights” on Friday.
Record what you will not do: no silent quant swap, no unofficial mirrors, no mixing tokenizers. OnePlus Platform, OneSource Cloud's AI orchestration platform, should expose the model id and quota so two teams cannot deploy different hashes under the same product name.
If the workload is healthcare or financial, add the data-path note to the memo, not a slogan on the model card. Weights being “local” do not make logs local. Point readers at healthcare or fintech infrastructure only when those data classes are in scope.
FAQ
Should we just pick the model that wins public arenas?
No. Public arenas do not include your tools, your jargon, or your license. Use them to build a shortlist of three, then run your kit. If a famous name fails your JSON tasks, it failed. Do not average that away with a blog score.
Is an open-weight model always safer to host locally?
Local hosting changes the data path. It does not grant a license, a safe tokenizer, or a clean supply chain. You still owe provenance, updates, and an eval when the publisher ships a new hash. Safer is a property of the whole stack.
How many local models should an enterprise standardize?
As few as the products require. One general chat model and one code or RAG-specialized model is a common start. Each extra family is another pin, another eval, and another incident class. Add a model when a task fails, not when a vendor announces one.
Do we choose the model before the GPUs?
Choose them together. A model that does not fit the GPUs you can get this quarter is not a choice. A GPU buy that assumes a model you cannot license is not a choice either. Put both in the same memo.
When is this the wrong page?
When you already chose the weights and need to stand up serving. That is deployment. When you are choosing a provider instead of a checkpoint, use a provider evaluation. Managed AI infrastructure can host the bake-off. It cannot pick the license for counsel.
Summary
Kill candidates on license and provenance, then score your own tasks, tools, and languages on the serving image you will run. Keep models that fit exclusive GPUs with margin. Write a memo that pins hash, tokenizer, and who may change them.
Local does not mean unranked-best. It means you can defend the file and the eval. Run the shortlist on dedicated U.S. GPUs so the bake-off matches production, and keep OneSource Cloud orchestration out of the legal gate. Counsel still owns the license line.