fine-tune 0 0 0

nvidia/Nemotron-SFT-Safety-v1

published by @nvidia

Alignment dataset tracked in the /datasets sub-catalog.

Lifetime downloads
27.6K
Last 30 days
521
Likes
14
Size
147.9 MB
Created on HF
2026-03-08
Age
7 months ago

Description

Dataset Description:

The Nemotron-SFT-Safety-v1 data is designed to align models to be robust against a variety of safety and security concerns that may arise in unaligned large language models.This dataset is a collection of:

A hybrid (open-source and synthetically generated) collection of prompts designed to elicit different model vulnerabilities, and

Synthetically generated responses designed to steer model behavior towards safety-aligned values and enhance model robustness… See the full description on the dataset page: https://huggingface.co/datasets/nvidia/Nemotron-SFT-Safety-v1.

Tags

task_categories:text-generationlanguage:enlicense:cc-by-4.0license:apache-2.0license:mitsize_categories:10K<n<100Kformat:jsonmodality:textlibrary:datasetslibrary:pandaslibrary:polarslibrary:mlcroissantregion:us

README current version from Hugging Face


language:

  • en
    license:
  • cc-by-4.0
  • apache-2.0
  • mit
    task_categories:
  • text-generation
    configs:
  • config_name: default
    data_files:
    • split: train
      path: data/train.jsonl

Dataset Description:

The Nemotron-SFT-Safety-v1 data is designed to align models to be robust against a variety of safety and security concerns that may arise in unaligned large language models.
This dataset is a collection of:

  1. A hybrid (open-source and synthetically generated) collection of prompts designed to elicit different model vulnerabilities, and
  2. Synthetically generated responses designed to steer model behavior towards safety-aligned values and enhance model robustness across a broad variety of potential attack vectors.

This dataset is ready for commercial use.

The prompts collection in this dataset comprise the following underlying subsets.

  • Collected datasets:
    • Nemotron Content Safety Dataset v2: Comprehensive coverage across a variety of content safety risks like self-harm, violence, criminal planning, profanity, and other harmful or harm-eliciting user requests.
    • Gretel Safety Alignment Dataset v1: Supplemental content safety dataset with a similar purpose as Nemotron Content Safety Dataset.
    • HarmfulTasks: Robustness against some templated but highly effective jailbreak attacks.
    • RedTeam 2k: Supplemental robustness against handcrafted red-teaming prompts.
  • Synthetically generated prompts:
    • sdg_oversafety: Contrastive safe prompts created by modifying unsafe prompts to maintain syntactic similarity but be semantically divergent.
    • sdg_jailbreaks: Supplemental jailbreak robustness data.
    • sdg_latent_injection: Improve resiliency against latent prompt injection attacks.
    • sdg_sensitive_categories: Hard refusals for extreme harm categories like self-harm.
    • sdg_bias_mitigation: Mitigate responses that may judge people based on characteristics like age.
    • sdg_leakreplay: Mitigate attempts to elicit possibly copyrighted content.

The response generation techniques are carefully designed to elicit reasoning traces and assistant responses that are aligned with our safety behavior guides.

Dataset Owner(s):

NVIDIA Corporation

Dataset Creation Date:

Created on: 12/01/2025
Last Modified on: 12/01/2025

License/Terms of Use:

This dataset is governed by the Creative Commons Attribution 4.0 International License (CC BY 4.0).
Additional Information: Apache 2.0 License; MIT License.

Intended Usage:

This dataset is intended to be used by the community as part of their model's supervised finetuning (SFT) recipe to improve model alignment on various dimensions of safety and security, including:

  1. Appropriate responses to self-harm, violence, criminal planning, child sexual abuse material (CSAM), and other harmful or harm-eliciting user requests.
  2. Robustness to common jailbreak strategies, cybersecurity attacks, or red-teaming attempts designed to coerce a model into outputting disturbing content.
  3. Counter-acting tendency of models to become overly safe and refuse everything through contrastive hard negatives (requests that share syntactic structure but not semantic meaning with unsafe requests).
  4. Mitigating biased model outputs on axes like age-based discrimination.
  5. Mitigating leakage of potentially copyrighted content.

Dataset Characterization

Data Collection Method

  • Hybrid: Human, Synthetic, Automated

Labeling Method

  • Hybrid: Human, Synthetic, Automated

Dataset Format

Modality: Text
Format: JSONL
Structure: Text + Metadata

Dataset Quantification

Note: We source only the prompts from the following underlying datasets.

Any responses that may exist in an underlying dataset are discarded and regenerated using the response generation techniques described in the Dataset Description section.

Prompts Collection Samples
Content safety (Nemotron Content Safety v2, Gretel Safety Alignment v1, sdg_sensitive_categories) 25,536
Robustness against jailbreaks (HarmfulTasks, RedTeam 2k, sdg_jailbreaks, sdg_latent_injection) 9,653
Robustness against over-refusals (sdg_oversafety) 7,023
Robustness against demographic biases (sdg_bias_mitigation) 2,000
Robustness against leaking sensitive content (sdg_leakreplay) 933
Total 45,145

Total Disk Size: ~200MB


Ethical Considerations:

NVIDIA believes Trustworthy AI is a shared responsibility and we have established policies and practices to enable development for a wide array of AI applications. When downloaded or used in accordance with our terms of service, developers should work with their internal developer teams to ensure this dataset meets requirements for the relevant industry and use case and addresses unforeseen product misuse.
Please report quality, risk, security vulnerabilities or NVIDIA AI Concerns here

README history 4 revisions

Every night we snapshot the README of every dataset in the catalog. When the SHA changes we archive the new version and diff it against the last. This is the evolving thought record of the alignment-data field: what the author decided to say about the corpus, and how that framing shifted over time.

  1. 2026-03-11updated license913fd7c5.3 KB
    Loading...
  2. 2026-03-10updated readmea41823c5.2 KB
    Loading...
  3. 2026-03-08initial commit4734d90128 B
    Loading...
  4. 2026-03-08initial commit4d0c1a30 B
    Loading...

Used by abliterated models none yet

No abliterated models in our catalog have declared this dataset in their YAML metadata yet. This can mean the dataset is used but not declared, is used outside abliteration workflows, or is new. The link will populate automatically as models are indexed.

Related datasets same stage · fine-tune

Read further

Metadata

License
cc-by-4.0

Repository

Download the dataset

0

Copy any of these snippets into your notebook or terminal. All three fetch directly from Hugging Face using your own credentials.

Recommended: datasets library (Python)
from datasets import load_dataset
ds = load_dataset("nvidia/Nemotron-SFT-Safety-v1")
Raw snapshot (Python)
from huggingface_hub import snapshot_download
snapshot_download(repo_id="nvidia/Nemotron-SFT-Safety-v1", repo_type="dataset")
git clone (requires git-lfs)
git clone https://huggingface.co/datasets/nvidia/Nemotron-SFT-Safety-v1
Catalog is the map. Apps are the tools.

Run models on your own machine, not in the cloud.

Every model page has an "Open in Abliteration" button that hands the model directly to the first-party desktop client, at the quantization your rig can actually run. No API keys, no subscription, no prompt leakage.

Open in Abliteration