Nemotron 3.5 Content Safety: Customizable Multimodal Safety for Global Enterprise AI

Summary

Nemotron 3.5 Content Safety is NVIDIA’s 4B-parameter model for evaluating user prompts, optional images, and optional assistant responses together, with multilingual coverage and enterprise-specific policy enforcement. It extends Nemotron 3 by accepting natural-language custom policies, producing optional auditable reasoning traces, and supporting binary verdicts, category-labelled verdicts, or THINK mode; disabling THINK preserves the default low-latency path. Built on Google Gemma 3 4B IT with a LoRA adapter and a 128K context window, it uses the Aegis 2.0 taxonomy of 13 core categories and 10 subcategories, and targets deployment on GPUs with 8GB or more of VRAM. The accompanying multimodal, multilingual dataset includes concise reasoning traces, while reported results average 96.5% on Multilingual Aegis, 88.8% on RTP-LX, and about 85% across the evaluated benchmark set.

Takeaways

1. 1

   The model evaluates a user prompt, optional image, and optional assistant response as one context, allowing interaction-dependent violations to be assessed in a single pass.

2. 2

   Custom policies can suppress irrelevant categories or inject organization-specific risk categories, while THINK-mode traces support compliance logging, human review, and policy iteration.

3. 3

   The model reports 96.5% average harmful-content classification accuracy on Multilingual Aegis across 12 languages and 88.8% on RTP-LX; THINK mode adds predictable latency proportional to trace length.