LLMnvidia

NVIDIA: Nemotron 3.5 Content Safety

NVIDIA Nemotron 3.5 Content Safety is a compact 4B-parameter multimodal guardrail model from NVIDIA, fine-tuned from Google Gemma-3-4B. It moderates both inputs to and responses from LLMs and VLMs, accepting...

Anyone in the Project can @-mention NVIDIA: Nemotron 3.5 Content Safety with the team's shared context - pooled credits, one chat, one memory.

All models

Starter is free forever - 1 Project, 100 credits/month, 1 MCP. No card.

Verdict

Nemotron 3.5 Content Safety is a specialized classifier built to detect harmful content across text and images. It flags policy violations — hate speech, violence, sexual content, self-harm — with category-level granularity. At $0.20/Mtok flat, it's cost-effective for high-volume moderation pipelines. The 131K context window handles long threads or multi-image posts in one call. Reach for this when you need programmatic safety checks before user-generated content goes live, not for nuanced editorial judgment or creative filtering.

Best for

  • User-generated content moderation at scale
  • Pre-publish safety checks in chat apps
  • Automated flagging of policy violations
  • Multi-image content screening in feeds
  • High-throughput moderation pipelines

Strengths

The 131K context window lets you screen entire comment threads or multi-post sequences without chunking. Multimodal support means one model handles both text and image violations, simplifying your stack. Flat $0.20/Mtok pricing — identical for input and output — makes cost forecasting trivial in high-volume scenarios. Category-level output (hate, violence, sexual, self-harm) gives you structured data for downstream routing or analytics.

Trade-offs

No public benchmarks yet, so precision and recall remain unverified against standard safety datasets. This is a classifier, not a conversational model — it won't explain why content was flagged or suggest edits. Proprietary license limits deployment flexibility compared to open-weight alternatives like Llama Guard. If you need cultural or contextual nuance (satire detection, regional norms), you'll still need human review or a fine-tuned layer on top.

Specifications

Provider
nvidia
Category
llm
Context length
131,072 tokens
Max output
117,964 tokens
Modalities
text, image
License
proprietary
Released
2026-06-04

Pricing

Input
$0.20/Mtok
Output
$0.20/Mtok
Model ID
nvidia/nemotron-3.5-content-safety

Per-token prices show what the model costs upstream. On Switchy your team draws from one shared org credit pool - one plan, one balance for everyone.

Team cost calculator

Estimated monthly spend
$3.52
17.6M tokens / month
5 seats · 80 msgs/day

Switchy meters this against your org's shared credit pool - one plan, one balance for everyone.

Providers

ProviderContextInputOutputP50 latencyThroughput30d uptime
nvidia131k$0.20/Mtok$0.20/Mtok———

Performance

Performance snapshots are collected daily. Check back after the next ingestion run.

Benchmarks

Public benchmark scores are not available yet for this model. Check back after the next ingestion run.

Works well with

Top MCPs

Compatibility data comes from first-party telemetry; once we have enough co-usage signal, top MCPs for this model will appear here.

How Switchy teams use it

Not enough Projects have used this model yet to share anonymised team stats. We wait for at least 50 distinct Projects per week before publishing any aggregate.

Starter prompts

Screen User Comment

Analyze this user comment for policy violations. Flag any content that violates community guidelines around hate speech, violence, sexual content, or self-harm: [paste comment text here]

Moderate Image Upload

Review this uploaded image for content policy violations. Identify any depictions of violence, explicit sexual content, or self-harm imagery: [attach image]

Batch Thread Review

Evaluate this comment thread for policy violations. For each message, flag hate speech, violence, sexual content, or self-harm references: [paste thread with message IDs]

Multi-Image Post Check

Assess this multi-image post for content violations. Check both the caption text and all attached images for hate speech, violence, explicit content, or self-harm: [paste caption + attach images]

Pre-Publish Gate

Perform a final safety check on this content before publication. Return a clear publish or hold recommendation with specific violation categories if any are detected: [paste content]

Example outputs

Illustrative - representative of the model's voice and quality, not literal recordings.

Prompt

Review this user comment for our community forum: 'These idiots running the company have no clue what they're doing. Fire them all and start over with people who actually know how to code.'

Output

{ "safety_assessment": "FLAGGED", "categories": { "harassment": 0.82, "profanity": 0.45, "hate_speech": 0.12 }, "recommendation": "MODERATE", "reasoning": "Content contains targeted insults ('idiots') and aggressive language directed at specific individuals. While expressing criticism, the delivery violates community standards for respectful discourse." }

Notes

Nemotron 3.5 excels at nuanced moderation decisions — it distinguishes legitimate criticism from personal attacks. The 131K token context window means it can evaluate entire conversation threads for escalating toxicity patterns, not just isolated messages. Trade-off: at $0.20/Mtok both ways, processing high-volume UGC requires careful batching strategy.

Prompt

Analyze this product description for policy violations before we publish it: 'Revolutionary weight loss formula! Lose 30 pounds in 2 weeks guaranteed. Doctors hate this one weird trick. Limited time offer — act now before Big Pharma shuts us down!'

Output

{ "safety_assessment": "FLAGGED", "categories": { "medical_misinformation": 0.91, "deceptive_claims": 0.88, "scam_indicators": 0.76 }, "recommendation": "BLOCK", "reasoning": "Multiple red flags: unrealistic health claims, conspiracy framing, urgency tactics, and implied medical authority without credentials. Content pattern matches known supplement scam templates." }

Notes

This example shows the model's strength in detecting compound policy violations — it's not just flagging one issue but recognizing how multiple deceptive patterns combine. The image modality support means it can also scan product photos for misleading before/after comparisons. However, the model returns confidence scores rather than binary decisions, so you'll need to set your own thresholds based on risk tolerance.

Prompt

Check if this customer support transcript needs escalation: 'I've been waiting 3 weeks for my refund. This is unacceptable service and I'm filing a complaint with the BBB and posting about this disaster on every review site I can find until someone fixes this.'

Output

{ "safety_assessment": "PASS", "categories": { "threats": 0.08, "harassment": 0.15, "profanity": 0.02 }, "recommendation": "ALLOW", "reasoning": "Customer expresses legitimate frustration about service delay using appropriate escalation channels (BBB, reviews). Language is firm but not abusive. Mentions of public complaints are standard consumer recourse, not threats.", "priority_flag": "HIGH_URGENCY" }

Notes

Nemotron 3.5 distinguishes between angry-but-legitimate customer complaints and actual harassment — critical for support teams who need to prioritize without over-moderating. The model's training on enterprise content moderation scenarios shows here. The limitation: it's a safety classifier, not a sentiment analyzer, so you'll want a separate tool for routing positive/neutral tickets efficiently.

Use-case deep-dives

Community platform moderation

When you need real-time safety checks on user-generated content at scale

A 12-person community platform team handling 200K daily posts needs instant safety filtering without sending everything to a third-party API. Nemotron 3.5 Content Safety runs at $0.20/Mtok in both directions with a 131K token context window, meaning you can batch-check entire threads or image-plus-caption pairs in a single call. The model evaluates text and image inputs for policy violations, returning structured risk scores you can route into your moderation queue. If your volume stays under 500M tokens monthly, the cost sits around $100—competitive with dedicated moderation services but with full control over thresholds and appeal workflows. This works when you need sub-second decisions and can't afford the latency of multi-hop API chains. Above 1B tokens monthly, negotiate volume pricing or consider a self-hosted alternative.

Customer support ticket triage

Why this model catches abusive tickets before they reach your support team

A 20-person SaaS company routes 3K support tickets daily through Zendesk, but 8% contain threats, slurs, or harassment that burn out agents. Nemotron 3.5 Content Safety sits in the webhook layer, scanning each ticket's text and any attached screenshots in under 300ms. At $0.20/Mtok, processing 90K tickets monthly (averaging 800 tokens each) costs roughly $14.40—negligible compared to agent churn. The 131K context window handles long complaint threads without truncation, and the image modality flags screenshots of abusive chat logs or inappropriate content. Route high-risk tickets to a specialized escalation queue or auto-close the most egregious cases with a policy reminder. This setup makes sense when agent well-being is a retention issue and you need deterministic filtering before human review.

Educational content review

How a small ed-tech team pre-screens student submissions at homework scale

A 5-person ed-tech startup lets high schoolers submit essay drafts with optional diagrams, but teachers report 2-3% contain self-harm references or bullying content that require immediate intervention. Nemotron 3.5 Content Safety processes each submission (text plus any images) at intake, flagging concerning material for counselor review before it reaches the teacher dashboard. At 10K submissions weekly averaging 1,200 tokens, monthly cost runs about $9.60—trivial compared to the liability of missing a crisis signal. The 131K window accommodates long-form essays without chunking, and the dual-modality support catches both written and visual red flags. Deploy this when you have a duty-of-care obligation and need automated first-pass screening that doesn't replace human judgment but ensures nothing slips through unnoticed.

Frequently asked

Is Nemotron 3.5 Content Safety good for content moderation?

Yes, that's its sole purpose. It's a specialised safety classifier, not a general LLM. You feed it text or images and it returns risk scores across categories like violence, hate speech, or sexual content. For chat moderation or user-generated content filtering, it's purpose-built. Don't expect it to write code or answer questions.

Is $0.20 per Mtok expensive for a safety model?

It's middle-of-the-road. OpenAI's Moderation API is free but text-only. Perspective API is also free but less comprehensive. At $0.20 in and out, you're paying for multimodal coverage and NVIDIA's infrastructure. For high-volume moderation (millions of messages daily), costs add up fast compared to free alternatives.

Can it handle 131k token context for long documents?

Technically yes, but safety classifiers rarely need that much context. Most moderation happens on individual messages or short threads. The 131k window means you could scan an entire long-form article or chat history in one pass, but latency and cost scale with input size. For typical use, you're sending under 1k tokens per call.

How does Nemotron 3.5 compare to OpenAI's Moderation API?

OpenAI's is free and fast but text-only. Nemotron handles images too, which matters for user uploads or memes. The trade-off: you pay $0.20/Mtok and need to manage NVIDIA's API. If you only moderate text and want zero cost, stick with OpenAI. If you need image safety checks, Nemotron fills that gap.

Should I use this for real-time chat moderation?

Only if you batch or pre-filter. Running every message through a paid API adds latency and cost. Better pattern: use free keyword filters or regex for obvious cases, then escalate borderline content to Nemotron. For async moderation (reviewing flagged posts later), it's fine. For sub-200ms chat, you'll need caching or edge rules first.

Compare with

More language models

See all language models →

Data last verified 13 hours ago.Sources aggregated hourly to weekly. See docs/architecture/model-directory.md.