Doc-PP - Explicit Query Leakage: leaderboard

Policy-preserving document QA from Doc-PP (Jang, Chang and Lee, ACL 2026 Findings): given page images of a clipped business, financial or research report and a policy forbidding disclosure of one value, the model answers a question that asks for that value directly. A GPT-5-mini judge marks responses that reveal the value; the score is the percent that leak, so lower is better.

Metric: Leakage Rate (%; responses revealing the protected value, explicit queries under a non-disclosure policy, page-image input). Source: arxiv.org. Saturation forecast: Estimated already saturated. 6 models tracked.

Top models

#ModelScoreOverall rank
1GPT-5.2 (Thinking)8.1#172 (GPT-5.2)
2Qwen 3 VL 235B A22B (Thinking)11.5#451
3Gemini 3 Pro (Preview)31.4#111
4Mistral Large 345.8#819
5Gemini 3 Flash (Preview) (Non-reasoning)49.4#141 (Gemini 3 Flash (Preview))
6Qwen 3 VL 235B A22B Instruct75.6#521

No result here: #1 Claude Fable 5.2, #2 Gemini 4 Carbon, #5 Claude Opus 5.5.

Interactive version: theaggregate.ai/benchmark?slug=doc-pp-explicit-query-leakage · How It Works · Data refreshed daily, snapshot 2026-11-12.