Skip to content

Deployment guide

Self-hosted LLM for business: what it takes

What a self-hosted LLM for business takes in 2026: open-weight models, hardware, the serving stack, and when a private deployment is the better route.

Updated 22 Aug 2026

Definition

Running a self-hosted LLM means taking an open-weight model, serving it on hardware you control with an inference engine, and owning the security, updates and monitoring yourself. The models and tools are mature. The cost is hardware and the engineering time to operate it.

01

Four words that are not synonyms

Self-hosted, on-premise, local and private each answer a different question, and marketing uses them interchangeably. Deciding which one you actually need is most of the requirements work.

Organisations that start from “it must be on-premise” often settle, once the data flows are drawn, for a single-tenant deployment with a defined model path, because that is what their obligations turn out to require.

  • Self-hosted: the software runs on infrastructure you control, including your own cloud account. It says nothing about where the model runs.
  • On-premise: your physical premises or data centre. Self-hosted software in your AWS account is not on-premise.
  • Local model: the inference itself runs on hardware you control. This is what people usually mean by a private LLM.
  • Private AI: the broadest term, covering single-tenant deployments and contractual data boundaries as well as fully local setups.
02

The models you can run

The open-weight families that matter in mid-2026 are Meta's Llama 4, Alibaba's Qwen, Mistral, DeepSeek, Google's Gemma and OpenAI's gpt-oss. Capability is no longer the blocker it was two years ago. For document work, drafting and internal question-answering, current open-weight models are competent, and the gap to frontier hosted models rarely decides the outcome.

There is no best model, only a best result on your tasks. Shortlist two or three, run your own documents and questions through them, and let that decide.

  • Check the licence for the specific model, not the family. Much of Qwen and Mistral and all of gpt-oss ship under Apache 2.0, DeepSeek under MIT. Llama's community licence has its own terms.
  • Check size against your hardware. The size you can serve is set by the memory of the GPUs you have.
03

The hardware

Two published reference points, both from OpenAI's own model cards: gpt-oss-20b runs within 16GB of memory, which is workstation territory, and gpt-oss-120b runs on a single 80GB GPU, meaning one H100-class card rather than a cluster. Larger open models need multi-GPU servers.

Those figures are for running the model. Serving it to a team is a different sizing exercise, because concurrent users multiply memory and throughput requirements. Renting GPUs in your own cloud account is still self-hosting in the sense that matters, and it is how most businesses start.

We give no cost figures. Hardware prices, rental rates and utilisation vary too much for a number that would transfer to your situation, and a specific figure here would be decoration.

04

The serving stack

Two tools dominate and they solve different problems. Ollama installs as a single binary, manages model downloads and quantisation, and exposes an OpenAI-compatible API, which makes it the right tool for evaluating models and building prototypes. vLLM is the production server, built for throughput under concurrent load and multi-GPU serving, and it exposes the same API shape.

The common pattern in 2026 is to prototype on Ollama and serve production traffic on vLLM. Because both speak the OpenAI API shape, application code rarely changes between them.

05

What a model on its own does not give you

This is the part that surprises teams. A served model is an endpoint that completes text. A system a business can rely on needs several more layers, and that is where most of the cost and most of the risk live.

  • Document parsing that survives scans, tables and long files, not just clean PDFs.
  • Retrieval over your own estate, so answers come from your material rather than the model's training data.
  • Access control enforced at retrieval, so nobody receives an answer built from documents they cannot read.
  • Citations back to source passages, so a reviewer can check an answer instead of trusting it.
  • Evaluation and monitoring, so you know what it gets wrong before staff act on it.
06

What you take on by running it

Self-hosting moves responsibility. It does not remove risk, and a badly run private server is less secure than a well-run vendor service.

Owning the deployment means owning security patching for the whole stack, model updates and the regression testing that goes with them, backups and tested recovery, monitoring, incident response, secrets management and egress policy. Each needs a named owner before production rather than after. Operational capability, not hardware, is routinely the binding constraint.

07

When to build, and when to buy a private deployment

Build it yourself when the constraints are hard, the workload sits close to a bare model, and you have the engineering capacity to own the stack above.

Buy a private deployment when what you need is the whole system inside a controlled boundary rather than a model endpoint. Marella is a system of that second kind. It ships as a self-hostable, Docker-based package run in a customer-controlled environment as a single-tenant deployment, and its model and provider paths are configurable rather than fixed to one API. A fully local model configuration is architecture-specific and gets verified per deployment for the proposed models and workflow.

What you stop building is the system itself: answers over your own documents, cited to the exact passage with the source opened alongside, and fact-checked against those sources after generation with unsupported claims flagged.

What this page does not prove

  1. B1Model capabilities, licences and tool behaviour were checked against public material on 20 August 2026 and change quickly.
  2. B2No cost figures appear here because none would transfer. Treat any you are quoted as specific to that configuration.
  3. B3Self-hosted is not synonymous with air-gapped, on-premises or local-model. State the property you need explicitly.
  4. B4Marella deployment specifics, including any local model path, are agreed at architecture review rather than assumed from this page.

Frequently asked questions

What is the best self-hosted LLM for business?

There is no single best. The families to shortlist in 2026 are Llama 4, Qwen, Mistral, DeepSeek, Gemma and gpt-oss. Check the licence for the specific model, then run two or three against your own documents and tasks and let the results decide.

What hardware do you need to run an LLM for a business?

As published reference points, OpenAI's gpt-oss-20b runs within 16GB of memory and gpt-oss-120b on a single 80GB GPU. Serving a team raises requirements with concurrency, so size against your expected load rather than the model's minimum.

Is a self-hosted LLM more secure than an API?

It changes who holds the risk rather than reducing it. Self-hosting keeps prompts and documents inside your boundary, but only a well-operated deployment, with patching, monitoring, access control and tested recovery, is actually more secure than a well-run vendor service with contractual data boundaries.

What is the difference between self-hosted and on-premise AI?

Self-hosted means the software runs on infrastructure you control, which includes your own cloud account. On-premise means your physical premises or data centre. Self-hosted covers both, on-premise is the narrower claim, and most requirements that start as on-premise are really about control of the data path.

Test the claim on your documents

Pick a real piece of work, agree what a good answer looks like, then go through the results together.