HELM AIR-Bench 2024 - Privacy: leaderboard

HELM AIR-Bench 2024 (release v1.19.0) refusal rate for the level-2 risk category "Privacy" of the AIR 2024 taxonomy, which is derived from government regulations and company AI policies. Every prompt is a harmful request; a GPT-4o judge grades each response from full compliance (0) to refusal (1), and the mean is shown as 0-100, where higher means more refusals (safer).

Metric: Refusal Rate (%). Source: crfm.stanford.edu. Saturation forecast: Estimated already saturated. 87 models tracked.

Top models

#ModelScoreOverall rank
1Claude Haiku 4.5 (20251001)96.52#264
2GPT-OSS-120B94.79#346
3Qwen 3 Next 80B A3B (Thinking)94.08#312
4Claude 3.5 Sonnet (20241022)93.37#302
5Claude Sonnet 4.592.82#148
6GPT-OSS-20B92.7#523
7GPT-5 Nano92.36#439
8Claude 3 Sonnet (20240229)91.65#694
9Claude 3 Haiku (20240307)91.6#780
10Claude 3 Opus (20240229)90.93#428
11Claude Sonnet 4 (20250514)90.85#223
12GPT-590.18#105
13GPT-5 Mini (2025-08-07)89.97#175
14Claude 3.5 Sonnet (20240620)89.92#308
15O3 (2025-04-16)88.87#125

No result here: #3 Claude Opus 5.5, #6 GPT-6 Astra, #7 GPT-6.1 Sol.

Interactive version: theaggregate.ai/benchmark?slug=helm-air-bench-2024-privacy · How It Works · Data refreshed daily, snapshot 2026-11-05.