Models Model details

NVIDIA

NVIDIA: Nemotron 3.5 Content Safety

nvidia/nemotron-3.5-content-safety

NVIDIA Nemotron 3.5 Content Safety is a compact 4B-parameter multimodal guardrail model from NVIDIA, fine-tuned from Google Gemma-3-4B. It moderates both inputs to and responses from LLMs and VLMs, accepting text and image input and returning text output: a safe/unsafe classification for the user prompt and the response, safety category labels, and an optional reasoning trace. It covers 12 languages with a context window of up to 128K tokens. It is suited for prompt and response moderation, content classification, safety pipelines, and enterprise AI guardrails with policy enforcement, and includes a togglable reasoning mode. It is part of the NVIDIA Nemotron family of open models for agentic AI.

Input
$0.2

/ 1M tokens

Output
$0.2

/ 1M tokens

Context window
131.07K

tokens

Limits

Context

131,072

tokens

Max output

117,964

90% of the context window

Parameters

4,300,079,472

Model facts

Author

NVIDIA

Tokenizer

Other

Modality

Text + Image -> Text

License

Other

Created

Jun 4, 2026

Hugging Face

nvidia/Nemotron-3.5-Content-Safety

Publication status

Hugging Face: verifiedLicense: publishedParameter count: published

Modalities

Input · TextInput · ImageOutput · Text

Generation controls

Frequency penaltyInclude reasoningLogit biasMax tokensMin pPresence penaltyReasoningRepetition penaltySeedStopTemperatureTop kTop p