Nemotron 3.5 Content Safety is a 4B-parameter dense model. Every parameter is read for every token generated, so both the memory it occupies and the speed it runs at follow directly from that one figure.
The short answer: at Q4_K_M, the quantisation most people actually run, Nemotron 3.5 Content Safety occupies roughly 2.2 GB of weights and needs about 4.2 GB of total VRAM once you add an 8K context window and runtime overhead. That puts it within reach of a Arc B580 (12 GB) and anything larger.
Quantisation trades precision for memory. Each row is Nemotron 3.5 Content Safety at 8K context, including the KV cache and ~1 GB of runtime overhead:
| Quant | Weights | Total VRAM | Quality |
|---|---|---|---|
Q8_0 | 4.2 GB | 6.2 GB | Near-lossless. Use when VRAM is free. |
Q6_K | 3.3 GB | 5.3 GB | Very close to FP16; the safe default if it fits. |
Q5_K_M | 2.9 GB | 4.8 GB | Mild loss, noticeably smaller. |
Q4_K_M | 2.2 GB | 4.2 GB | The sweet spot most people run. |
Q3_K_M | 1.8 GB | 3.7 GB | Visible degradation. Fallback only. |
Below Q4 the returns turn sharply negative. Q3_K_M saves 0.5 GB over Q4_K_M but introduces errors you will notice in structured output and long-form reasoning. If Q4 does not fit, a smaller model at Q5 or Q6 almost always beats this one at Q3.
Every current consumer card, against Nemotron 3.5 Content Safety at Q4_K_M. Throughput is estimated from memory bandwidth against the full weights:
| GPU | VRAM | Bandwidth | Runs it? | Est. speed |
|---|---|---|---|---|
| RTX 5090 | 32 GB | 1,792 GB/s | Yes — Q8_0 | ~337 tok/s |
| RTX 4090 | 24 GB | 1,008 GB/s | Yes — Q8_0 | ~190 tok/s |
| RTX 3090 | 24 GB | 936 GB/s | Yes — Q8_0 | ~176 tok/s |
| RX 7900 XTX | 24 GB | 960 GB/s | Yes — Q8_0 | ~181 tok/s |
| RTX 5080 | 16 GB | 960 GB/s | Yes — Q8_0 | ~181 tok/s |
| RTX 5070 Ti | 16 GB | 896 GB/s | Yes — Q8_0 | ~169 tok/s |
| RTX 5060 Ti 16GB | 16 GB | 448 GB/s | Yes — Q8_0 | ~84 tok/s |
| RTX 4080 SUPER | 16 GB | 736 GB/s | Yes — Q8_0 | ~139 tok/s |
| RTX 4070 Ti SUPER | 16 GB | 672 GB/s | Yes — Q8_0 | ~126 tok/s |
| RTX 4060 Ti 16GB | 16 GB | 288 GB/s | Yes — Q8_0 | ~54 tok/s |
| RX 9070 XT | 16 GB | 645 GB/s | Yes — Q8_0 | ~121 tok/s |
| RTX 5070 | 12 GB | 672 GB/s | Yes — Q8_0 | ~126 tok/s |
| Arc B580 | 12 GB | 456 GB/s | Yes — Q8_0 | ~86 tok/s |
Notice that VRAM and bandwidth do not move together. The RTX 4060 Ti 16GB holds as much as an RTX 4080 SUPER but reads it at 288 GB/s against 736 GB/s, so it will load this model and then generate at roughly a third the speed. Capacity decides whether it runs; bandwidth decides whether you enjoy using it.
Fastest path, using Ollama:
ollama run nemotron-3-5-content-safetyFor control over quantisation and context, pull the GGUF directly and serve it with llama.cpp:
huggingface-cli download nvidia/Nemotron-3.5-Content-Safety \
--include "*Q4_K_M*.gguf" --local-dir ./models
llama-server -m ./models/*Q4_K_M*.gguf \
--n-gpu-layers 999 \
--ctx-size 8192--n-gpu-layers 999 pushes everything onto the GPU; lower it until the model loads if you are short on memory. --ctx-size is worth tuning deliberately — this model supports up to 128K tokens, but the KV cache grows with it, and asking for the full window when you only need 8K can cost you several gigabytes for nothing.
About 4.2 GB at Q4_K_M with an 8K context window: 2.2 GB of weights plus KV cache and roughly 1 GB of runtime overhead. At Q8_0 it needs 6.2 GB, and at Q3_K_M it comes down to 3.7 GB.
The Arc B580 at 12 GB is the least expensive card that holds it at Q4_K_M, at around $249.
Yes — it fits at Q4_K_M with room for an 8K context.
The weights are published openly on Hugging Face as nvidia/Nemotron-3.5-Content-Safety, but the licence is set by the model's publisher and varies — some are Apache 2.0 or MIT, others carry usage restrictions or revenue thresholds. Check the licence file on the model card before deploying it commercially.
Measurably, but far less than people expect down to Q4. Q6_K is close enough to FP16 that differences are hard to detect; Q4_K_M costs a small amount of accuracy on reasoning and structured output; below Q4 the degradation becomes obvious. Running a larger model at Q4 generally beats a smaller one at Q8.
These figures assume the whole model sits in VRAM and the GPU sustains its rated bandwidth. Real throughput drops if any layers are offloaded to system RAM, if your context is long enough that attention starts to dominate, or if the card is thermally throttling. Prompt processing is also compute-bound rather than bandwidth-bound and follows different limits.
Budget 2 GB for the Q4_K_M GGUF, or 5 GB for Q8_0. Download the specific quantisation you want rather than the whole repository — most GGUF repos hold every variant, and cloning all of them wastes a great deal of space.