NVIDIA: Nemotron 3.5 Content Safety
NVIDIA Nemotron 3.5 Content Safety is a compact 4B-parameter multimodal guardrail model from NVIDIA, fine-tuned from Google Gemma-3-4B. It moderates both inputs to and responses from LLMs and VLMs, accepting...
Anyone in the Project can @-mention NVIDIA: Nemotron 3.5 Content Safety with the team's shared context - pooled credits, one chat, one memory.
Starter is free forever - 1 Project, 100 credits/month, 1 MCP. No card.
Verdict
Best for
- User-generated content moderation at scale
- Pre-publish safety checks in chat apps
- Automated flagging of policy violations
- Multi-image content screening in feeds
- High-throughput moderation pipelines
Strengths
The 131K context window lets you screen entire comment threads or multi-post sequences without chunking. Multimodal support means one model handles both text and image violations, simplifying your stack. Flat $0.20/Mtok pricing — identical for input and output — makes cost forecasting trivial in high-volume scenarios. Category-level output (hate, violence, sexual, self-harm) gives you structured data for downstream routing or analytics.
Trade-offs
No public benchmarks yet, so precision and recall remain unverified against standard safety datasets. This is a classifier, not a conversational model — it won't explain why content was flagged or suggest edits. Proprietary license limits deployment flexibility compared to open-weight alternatives like Llama Guard. If you need cultural or contextual nuance (satire detection, regional norms), you'll still need human review or a fine-tuned layer on top.
Specifications
- Provider
- nvidia
- Category
- llm
- Context length
- 131,072 tokens
- Max output
- 117,964 tokens
- Modalities
- text, image
- License
- proprietary
- Released
- 2026-06-04
Pricing
- Input
- $0.20/Mtok
- Output
- $0.20/Mtok
- Model ID
nvidia/nemotron-3.5-content-safety
Per-token prices show what the model costs upstream. On Switchy your team draws from one shared org credit pool - one plan, one balance for everyone.
Team cost calculator
5 seats · 80 msgs/day
Switchy meters this against your org's shared credit pool - one plan, one balance for everyone.
Providers
| Provider | Context | Input | Output | P50 latency | Throughput | 30d uptime |
|---|---|---|---|---|---|---|
| nvidia | 131k | $0.20/Mtok | $0.20/Mtok | — | — | — |
Performance
Benchmarks
Works well with
Top MCPs
Compatibility data comes from first-party telemetry; once we have enough co-usage signal, top MCPs for this model will appear here.
How Switchy teams use it
Starter prompts
Screen User Comment
Analyze this user comment for policy violations. Flag any content that violates community guidelines around hate speech, violence, sexual content, or self-harm: [paste comment text here]
Moderate Image Upload
Review this uploaded image for content policy violations. Identify any depictions of violence, explicit sexual content, or self-harm imagery: [attach image]
Batch Thread Review
Evaluate this comment thread for policy violations. For each message, flag hate speech, violence, sexual content, or self-harm references: [paste thread with message IDs]
Multi-Image Post Check
Assess this multi-image post for content violations. Check both the caption text and all attached images for hate speech, violence, explicit content, or self-harm: [paste caption + attach images]
Pre-Publish Gate
Perform a final safety check on this content before publication. Return a clear publish or hold recommendation with specific violation categories if any are detected: [paste content]
Example outputs
Illustrative - representative of the model's voice and quality, not literal recordings.
Review this user comment for our community forum: 'These idiots running the company have no clue what they're doing. Fire them all and start over with people who actually know how to code.'
{ "safety_assessment": "FLAGGED", "categories": { "harassment": 0.82, "profanity": 0.45, "hate_speech": 0.12 }, "recommendation": "MODERATE", "reasoning": "Content contains targeted insults ('idiots') and aggressive language directed at specific individuals. While expressing criticism, the delivery violates community standards for respectful discourse." }
Nemotron 3.5 excels at nuanced moderation decisions — it distinguishes legitimate criticism from personal attacks. The 131K token context window means it can evaluate entire conversation threads for escalating toxicity patterns, not just isolated messages. Trade-off: at $0.20/Mtok both ways, processing high-volume UGC requires careful batching strategy.
Analyze this product description for policy violations before we publish it: 'Revolutionary weight loss formula! Lose 30 pounds in 2 weeks guaranteed. Doctors hate this one weird trick. Limited time offer — act now before Big Pharma shuts us down!'
{ "safety_assessment": "FLAGGED", "categories": { "medical_misinformation": 0.91, "deceptive_claims": 0.88, "scam_indicators": 0.76 }, "recommendation": "BLOCK", "reasoning": "Multiple red flags: unrealistic health claims, conspiracy framing, urgency tactics, and implied medical authority without credentials. Content pattern matches known supplement scam templates." }
This example shows the model's strength in detecting compound policy violations — it's not just flagging one issue but recognizing how multiple deceptive patterns combine. The image modality support means it can also scan product photos for misleading before/after comparisons. However, the model returns confidence scores rather than binary decisions, so you'll need to set your own thresholds based on risk tolerance.
Check if this customer support transcript needs escalation: 'I've been waiting 3 weeks for my refund. This is unacceptable service and I'm filing a complaint with the BBB and posting about this disaster on every review site I can find until someone fixes this.'
{ "safety_assessment": "PASS", "categories": { "threats": 0.08, "harassment": 0.15, "profanity": 0.02 }, "recommendation": "ALLOW", "reasoning": "Customer expresses legitimate frustration about service delay using appropriate escalation channels (BBB, reviews). Language is firm but not abusive. Mentions of public complaints are standard consumer recourse, not threats.", "priority_flag": "HIGH_URGENCY" }
Nemotron 3.5 distinguishes between angry-but-legitimate customer complaints and actual harassment — critical for support teams who need to prioritize without over-moderating. The model's training on enterprise content moderation scenarios shows here. The limitation: it's a safety classifier, not a sentiment analyzer, so you'll want a separate tool for routing positive/neutral tickets efficiently.
Use-case deep-dives
When you need real-time safety checks on user-generated content at scale
A 12-person community platform team handling 200K daily posts needs instant safety filtering without sending everything to a third-party API. Nemotron 3.5 Content Safety runs at $0.20/Mtok in both directions with a 131K token context window, meaning you can batch-check entire threads or image-plus-caption pairs in a single call. The model evaluates text and image inputs for policy violations, returning structured risk scores you can route into your moderation queue. If your volume stays under 500M tokens monthly, the cost sits around $100—competitive with dedicated moderation services but with full control over thresholds and appeal workflows. This works when you need sub-second decisions and can't afford the latency of multi-hop API chains. Above 1B tokens monthly, negotiate volume pricing or consider a self-hosted alternative.
Why this model catches abusive tickets before they reach your support team
A 20-person SaaS company routes 3K support tickets daily through Zendesk, but 8% contain threats, slurs, or harassment that burn out agents. Nemotron 3.5 Content Safety sits in the webhook layer, scanning each ticket's text and any attached screenshots in under 300ms. At $0.20/Mtok, processing 90K tickets monthly (averaging 800 tokens each) costs roughly $14.40—negligible compared to agent churn. The 131K context window handles long complaint threads without truncation, and the image modality flags screenshots of abusive chat logs or inappropriate content. Route high-risk tickets to a specialized escalation queue or auto-close the most egregious cases with a policy reminder. This setup makes sense when agent well-being is a retention issue and you need deterministic filtering before human review.
How a small ed-tech team pre-screens student submissions at homework scale
A 5-person ed-tech startup lets high schoolers submit essay drafts with optional diagrams, but teachers report 2-3% contain self-harm references or bullying content that require immediate intervention. Nemotron 3.5 Content Safety processes each submission (text plus any images) at intake, flagging concerning material for counselor review before it reaches the teacher dashboard. At 10K submissions weekly averaging 1,200 tokens, monthly cost runs about $9.60—trivial compared to the liability of missing a crisis signal. The 131K window accommodates long-form essays without chunking, and the dual-modality support catches both written and visual red flags. Deploy this when you have a duty-of-care obligation and need automated first-pass screening that doesn't replace human judgment but ensures nothing slips through unnoticed.
Frequently asked
Is Nemotron 3.5 Content Safety good for content moderation?
Yes, that's its sole purpose. It's a specialised safety classifier, not a general LLM. You feed it text or images and it returns risk scores across categories like violence, hate speech, or sexual content. For chat moderation or user-generated content filtering, it's purpose-built. Don't expect it to write code or answer questions.
Is $0.20 per Mtok expensive for a safety model?
It's middle-of-the-road. OpenAI's Moderation API is free but text-only. Perspective API is also free but less comprehensive. At $0.20 in and out, you're paying for multimodal coverage and NVIDIA's infrastructure. For high-volume moderation (millions of messages daily), costs add up fast compared to free alternatives.
Can it handle 131k token context for long documents?
Technically yes, but safety classifiers rarely need that much context. Most moderation happens on individual messages or short threads. The 131k window means you could scan an entire long-form article or chat history in one pass, but latency and cost scale with input size. For typical use, you're sending under 1k tokens per call.
How does Nemotron 3.5 compare to OpenAI's Moderation API?
OpenAI's is free and fast but text-only. Nemotron handles images too, which matters for user uploads or memes. The trade-off: you pay $0.20/Mtok and need to manage NVIDIA's API. If you only moderate text and want zero cost, stick with OpenAI. If you need image safety checks, Nemotron fills that gap.
Should I use this for real-time chat moderation?
Only if you batch or pre-filter. Running every message through a paid API adds latency and cost. Better pattern: use free keyword filters or regex for obvious cases, then escalate borderline content to Nemotron. For async moderation (reviewing flagged posts later), it's fine. For sub-200ms chat, you'll need caching or edge rules first.
Compare with
More language models
- NVIDIA: Nemotron 3.5 Content Safety (free)nvidia
- NVIDIA: Nemotron 3.5 Lightningnvidia
- NVIDIA: Nemotron 3.5 Lightning (free)nvidia
- NVIDIA: Nemotron 3.5 Super VLnvidia
- NVIDIA: Nemotron 3.5 Super VL (free)nvidia
- NVIDIA: Nemotron 3 Nano 30B A3Bnvidia
- NVIDIA: Nemotron 3 Nano Omni (free)nvidia
- NVIDIA: Nemotron 3 Supernvidia
- NVIDIA: Nemotron 3 Super (free)nvidia
- NVIDIA: Nemotron 3 Ultranvidia
- NVIDIA: Nemotron 3 Ultra (free)nvidia
- NVIDIA: Switchyardnvidia