@toadjaune @miki @GossiTheDog @Quinnypig it is an open research question.

The only thing I know which achieves actual privacy guarantees is differential privacy, and that makes LLMs commercially unusable.